Problems while linking on SUSE PPC 64 .. ( unresolvable R_PPC64_REL24 relocation against symbol `.stat' )

hi, i am trying to build an application using openssl on SUSE PPC 64. Getting the following error while linking . /usr/bin/g++ -O -mpowerpc64 -m64 -D_GNU_SOURCE -DACE_SOVERSION=4 - DACE_MT_SAFE=0 -DACE_NDEBUG -DACE_USE_RCSID=0 -DACE_HAS_EXCEPTIONS -D__ACE_INLINE__ -D_FILE_OFFSET_BITS=64

Re: How to protect the private key !

Hi, I did not know about the function EVP_PKEY *PEM'_read_PrivateKey(FILE *fp, EVP_PKEY **pkey,pem_password_callback function *cb,void *u ) and it's exactly what I need to use (very similar situation like the author of this thread). However, how could I use the EVP_PKEY after that ? Is there

Re: How to protect the private key !

2008/11/5 BiGNoRm6969 [EMAIL PROTECTED] Hi, I did not know about the function EVP_PKEY *PEM'_read_PrivateKey(FILE *fp, EVP_PKEY **pkey,pem_password_callback function *cb,void *u ) and it's exactly what I need to use (very similar situation like the author of this thread). However, how

RE: Key.pme expiration problem

Please check time function gtime()or gtime_r() return some time that is going to compare certificate time before and after time. Then it will return expire or going to expire. Please check it. Thank you. Regards, --Ajeet Kumar Singh Sarve Bhavantu Sukhina ,Sarve Santu NiramayaSarve

Fwd: Problem with generating keys (lib not commandline)

Hi, I posted this last week, and a couple of people said they could help but then, I havent heard any more. If someone has any ideas, they would be gratefully appreciated. I am having a bit of a problem generating a set of new keys. I have code that works just fine when using a pair of

Re: Compiling OpenSSL 0.9.8i for Windows Mobile 5 With Visual Studio 2005

Hey, good we have some progress. ext Steven Harris wrote: snip I then tried the build process again for openssl: - Ran perl Configure VC-CE - Ran ms\do_ms and got an error that PLATFORM was not defined. So I defined it as VC-CE. Ran it again and it worked. - Removed the /WX flag from the

How use an hardcoded private key instead of a *.pem file

Hi, I want to sign an application with a private key that will be include (hardcode) in my software. OpenSSL functions (like SSL_CTX_use_PrivateKey_file()) only accept private key that are stored on filesystem. Is there any way to use hardcoded private key !? Yes I can live with the fact that

openssl boolean on msvc 7.1

Hi, I'm trying to compile an application which use openssl-0.9.8i on Microsoft Visual 7.1. But i noted that on Openssl/ASN1.h (line 516) has a declaration ASN1_BOOLEAN boolean; and on C:\Program Files\Microsoft Visual Studio .NET 2003\Vc7\PlatformSDK\Include\rpcndr.h (line 147) has a declaration

Key.pem expiration problem

Hello, Yesterday I created a new certificate request for use with Sendmail and STARTTLS. I signed the request with my existing CA. This morning I'm getting messages from certwatch say the key and cert are expired or are going to expire in less than 7 days. My CA is good till December 2010, and

Key.pme expiration problem

Hello, Yesterday I created a new certificate request for use with Sendmail and STARTTLS. I signed the request with my existing CA. This morning I'm getting messages from certwatch say the key and cert are expired or are going to expire in less than 7 days. My CA is good till December 2010,

RE: Key.pem expiration problem

Please check time function gtime()or gtime_r() return some time that is going to compare certificate time before and after time. Then it will return expire or going to expire. Please check it. Thank you. Regards, --Ajeet Kumar Singh Thank you. Regards, --Ajeet Kumar Singh

RE: Compiling OpenSSL 0.9.8i for Windows Mobile 5 With Visual Studio 2005

Hi Maurice, Thanks for the help. I seem to be getting further but still cant get openssl to compile. I set the PATH, INCLUDE and LIB environment variables as you suggested. I downloaded wcecompat and managed to get that compiling. I set the WCECOMPAT environment variable to C:\wcecompat.

Re: How to protect the private key !

Hooray, this question I can answer. (Maybe someone can answer mine now?) I dont know if it is a bad way, cryptographically, but it works. //The bio to handle a char * static BIO *memory_buf_BIO(const char* buf, int len) { BIO* bio; BUF_MEM* mem; if (!buf) return NULL; if (len ==

Re: Muscle Card Problems

Bram Cymet wrote: I am using a new javacard with the musclecard applet. I have been able to generate and sign with 1024 bit keys but when I got to use 2048 bit keys I can only generate them not sign with them. I get the following error: 6068:error:8006C06D:lib(128):RSA_PRIV_ENC:msc invalid

RE: Compiling OpenSSL 0.9.8i for Windows Mobile 5 With Visual Studio 2005

Excellent! We now have a successfully compiled openssl build. Thanks. I still had to take the /WX flag out of the ce.mak file because of a warning from wcecompat: The warning is in wcecompat\include\stdlib.h(38) float fmodf(float) incorrect number of arguments for intrinsic function, expected

X509_NAME_add_entry question

I have a X509_NAME variable which contains something like /CN=mycn/OU=myou/O=myo I want to modify this into /CN=mycn/OU=yourou/O=myo i.e. I want to change the OU from myou to yourou Extracting the different RDNs (CN, OU O) and recreating a new X509_NAME using X509_NAME_add_entry with loc as -1

Re: OpenSSL API which build the chain from a peer certificate

Hi Aravind: On November 6, 2008 01:51:20 am Aravinda babu wrote: Hi all, Is there any OpenSSL API which will prepare the certificate chain from the peer certificate given as input ? I have only peer certificate.I have to build the cert chain from this This was already answered

Help with EC and ECDSA.

Hello list, I have been trying to study the documentation on ECDSA, and header files for ec.h but I have not managed to make it do what I need. I am currently trying to convert some existing Java code (using bouncycastle) to C and OpenSSL. Would it be possible to get someone who knows more than

SHA256, FIPS 180-3 padding

Dear all, does OpenSSL's implementation of SHA256 apply the padding as defined in FIPS 180-3, section 5.1.1? If yes, where I can find this in the source code? I tried to understand HASH_FINAL() in md32_common.h but I could not relate this to padding. Thanks for your help. Martin

Question

Is there a way to export a .kyr and .sth key file from Verisign into a .pem format to be used by our McAfee appliance? Thanks Joe Joe Brilla Distributed Systems Administrator Office of Management Info Systems Department of the Auditor General 717-783-3040 [EMAIL PROTECTED]

RAND_egd() blocking -- despite contract that states otherwise?

Hi there, I'm investigating a case where a customer's prngd service was blocking, which by itself is not supposed to happen AFAIK. This was causing a hard-to-diagnose startup hang for our code that uses OpenSSL. The call to RAND_egd() was blocking in a call to read(). I would like to address

Re: Key.pme expiration problem

Ajeet, Thanks for your reply, however I'm not sure I understand. I'm not a programmer, I'm just trying to use my certificates and keys. Can you give me a more newbie example of how to check the time function? Thanks, Rick Ajeet kumar.S wrote: Please check time function gtime()or gtime_r()

Spurious 3rd arg for function_begin_B() in two 0.9.8i asm.pl drivers

OpenSSL 0.9.8i and also 20081105 stable SNAPSHOT. crypto/md5/asm/md5-586.pl:172:function_begin_B($name,,3); crypto/ripemd/asm/rmd-586.pl:302: function_begin_B($name,,3); the extra argument is ignored, so it seems to do no harm, but it should probably either be dropped, or

Re: RAND_egd() blocking -- despite contract that states otherwise?

There needs to be a call to fcntl(fd,F_SETFL,O_NONBLOCK) just after the socket() call and error status check. -Kyle H On Thu, Nov 6, 2008 at 8:08 AM, Ben Sandee [EMAIL PROTECTED] wrote: Hi there, I'm investigating a case where a customer's prngd service was blocking, which by itself is not

Adding timestamp to smime signature

Hi all! I actually use the openssl cli smime command to create digital signatures. I now want to include a timestamp into the signature ... is it possible through the cli version using the ts command? Or isn't there a way to merge both results through cli? Thanks! Jan

RE: RAND_egd() blocking -- despite contract that states otherwise?

There needs to be a call to fcntl(fd,F_SETFL,O_NONBLOCK) just after the socket() call and error status check. -Kyle H That will just waste CPU. The code will spin in each loop while (!success) loop until it gets what it wants. It will still not return any time soon, but will do so at 100%

Re: RAND_egd() blocking -- despite contract that states otherwise?

On Thu, Nov 6, 2008 at 9:11 PM, David Schwartz [EMAIL PROTECTED] wrote: There needs to be a call to fcntl(fd,F_SETFL,O_NONBLOCK) just after the socket() call and error status check. That will just waste CPU. The code will spin in each loop while (!success) loop until it gets what it