Geting /Using RSA public - private Key by Windows Lib (C languaje)

2013-03-26 Thread rod_proteus
Hello. I need to Get and Set public and private keys to encrypt and decrypt using RSA algorithm. In both cases I need to handle the info in binary format , something like this: For example: int KeyLen = 256; unsigned char Modulus[32]; unsigned char Exponent[32]; unsigned char

Re: FIPS enable Apache 2.4.3 with OpenSSL 1.0.1c-fips

2013-03-26 Thread Cipher
Jerry, All, I have built FIPS capable openssl 1.0.1c and formed shared libs(libcrypto.s0.1.0.0 and libssl.so.1.0.0) . Now i am trying to build apache to make it FIPS capable. Do you mind telling me the steps involved in building Apache with newly built openssl? (I am cross compiling, so have not

Re: Geting /Using RSA public - private Key by Windows Lib (C languaje)

2013-03-26 Thread Ken Goldman
For the first: - generate the RSA key - pull n,e,d bignums out of the RSA structure - use bn2bin to get the key parts For the second: - use bin2bn on n,e,d - assign the bignums to the RSA structure I can point you to sample code if you like. On 3/25/2013 10:32 AM, rod_proteus wrote: Hello.

Strange loading issue(?) with libcrypto

2013-03-26 Thread andrew cooke
I admit that this is probably not an OpenSSL-specific issue, but perhaps some experienced C dev here has seen this before and would be kind enough to explain? Apologies in advance, but (as I hope I can show) it's very odd... So, I have a dynamic engine. One that works with openssl from the

Re: Geting /Using RSA public - private Key by Windows Lib (C languaje)

2013-03-26 Thread rod_proteus
Ken, Thanks for replaying. Just for checking, please post the code. Thanks. :) -- View this message in context: http://openssl.6102.n7.nabble.com/Geting-Using-RSA-public-private-Key-by-Windows-Lib-C-languaje-tp44529p44542.html Sent from the OpenSSL - User mailing list archive at Nabble.com.

Sharing anchors and blacklists between crypto libraries

2013-03-26 Thread Stef Walter
Hey all, p11-kit has a trust module which is a first step toward a central cross-crypto-library list of trust anchors and blacklists for Linux. http://p11-glue.freedesktop.org/trust-module.html In addition to its PKCS#11 based access methods, p11-kit also provides an extract tool for writing

Correct way to call the EVP_CIPHER_CTX_cleanup()

2013-03-26 Thread tos iro
Hello I'm sorry when there is an impoliteness. I want you to tell me a *correct way to* call the EVP_CIPHER_CTX_cleanup(). I'm writing the program for encrypt independent data one by one. Should I call EVP_CIPHER_CTX_cleanup() at each EVP_EncryptFinal_ex() to Context? function(){

Re: Correct way to call the EVP_CIPHER_CTX_cleanup()

2013-03-26 Thread Matt Caswell
On 26 March 2013 16:45, tos iro motto.mo...@gmail.com wrote: Hello I'm sorry when there is an impoliteness. I want you to tell me a *correct way to* call the EVP_CIPHER_CTX_cleanup(). I'm writing the program for encrypt independent data one by one. Should I call EVP_CIPHER_CTX_cleanup() at

0.9.8 vs 1.0.x

2013-03-26 Thread Gopakumar Pillai
Hi, Can any one point me to a location where I can find the major differences between versions 0.9.8 and 1.0.x? Now that 0.9.8 may not live for long, planning to move to 1.0.x versions. Are they API compatible? Any other restrictions? Thank You in advance. --Gopu

Re: 0.9.8 vs 1.0.x

2013-03-26 Thread Walter H.
the major features that 1.0.x supports are openssl ts (http://www.openssl.org/docs/apps/ts.html) openssl cms (http://www.openssl.org/docs/apps/cms.html) Greetings, Walter On 26.03.2013 18:50, Gopakumar Pillai wrote: Hi, Can any one point me to a location where I can find the major

Re: 0.9.8 vs 1.0.x

2013-03-26 Thread redpath
Well I discovered one thing this constant EVP_MAX_KEY_LENGTH changed when using FIPS from 32 to 64. The story is I am using 0.9.8 and this constant to assure the password a person may use by a user is not larger than this for AES128 ciphering as undetermined results happen on other platforms in

Re: 0.9.8 vs 1.0.x

2013-03-26 Thread Jakob Bohm
You can also read the detailed list in the file CHANGES in the OpenSSL source code download, that file lists the changes, version by version going back several versions. However the file in the latest 1.0.x archive does not list which fixes were made to 0.9.8 after work started on version 1.0.0,

Re: 0.9.8 vs 1.0.x

2013-03-26 Thread Peter Beal
We've found that upstream-tracker.org was a good place to start. Unfortunately, it only performs comparisons from one release to the next, so what we did was download one of the tools that makes up upstream-tracker and ran it against the specific release we were using and the release to which

Re: 0.9.8 vs 1.0.x

2013-03-26 Thread Jakob Bohm
You are doing it very very wrong. It has been known at least since the 1970s that trying to use ASCII letters (with or without parity) directly as the encryption key is a bad idea, because human entered text has only about 1 to 2 bits of entropy per letter and even machine generated random text

Re: 0.9.8 vs 1.0.x

2013-03-26 Thread Jakob Bohm
Changed API symbols is only a subset of functionality changes, which is why it is so useful that the OpenSSL project provides an actual list of changes, formatted for human consumption. But if you do want to look for hidden or undocumented changes, just do a straight-forward text compare of the

Re: 0.9.8 vs 1.0.x

2013-03-26 Thread redpath
I knew this was coming about the password and of course we take this password and create a key through Password-based Key derivation but point is the constant changed and we should have used our own. That was the only surprise for us. And yes I use AES_BLOCK_SIZE and other constants but you

Tri cung

2013-03-26 Thread Tri Cung
Sent from my iPad __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager

How to create crt and pem

2013-03-26 Thread Kevin Jenkins
Hi all. I'm a new user and am confused on how to generate .crt and .pem file. I am using Apache Tomcat with OpenSSL. I have a domain with a DNS entry pointing to the IP of my webserver. Their support have given me 3 files intermediate.txt - intermediate certificate?

RE: How to create crt and pem

2013-03-26 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Kevin Jenkins Sent: Tuesday, 26 March, 2013 21:53 I'm a new user and am confused on how to generate .crt and .pem file. I am using Apache Tomcat with OpenSSL. I have a domain with a DNS entry pointing to the IP of my webserver. Their support

RE: 0.9.8 vs 1.0.x

2013-03-26 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Walter H. Sent: Tuesday, 26 March, 2013 15:16 the major features that 1.0.x supports are openssl ts (http://www.openssl.org/docs/apps/ts.html) openssl cms (http://www.openssl.org/docs/apps/cms.html) Although much of 'cms' was already in

RE: Geting /Using RSA public - private Key by Windows Lib (C languaje)

2013-03-26 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Ken Goldman Sent: Tuesday, 26 March, 2013 10:39 For the first: - generate the RSA key - pull n,e,d bignums out of the RSA structure - use bn2bin to get the key parts For the second: - use bin2bn on n,e,d - assign the bignums to the RSA

Re: How to create crt and pem

2013-03-26 Thread Kevin Jenkins
Thank you Dave. This is all new to me so your information is really helpful. Regarding your response: My files are in pem format. The default server.xml has Listener className=org.apache.catalina.core.AprLifecycleListener SSLEngine=on / I'll leave that in since it seems to be what I need