crlDistributionPoints with DirName value?

2003-11-04 Thread Mike Acar
Hi, (Sorry if some of my terminology is wrong - What I understand of X.509 certs I've picked up working with OpenSSL to set up IPSec and SSL tunnels.) I've been working on getting SSH Sentinel to talk to the Linux FreeS/WAN IPSec implementation, and am at the stage where I want to get Sentinel

ASN1_sign, ASN1_verify

2003-11-04 Thread Francis.Vanhemmens
Hi everybody, i have a strange behavior ... (while investigationg it i noticed that i2d_ASN1_BIT_STRING shorten a bit string if there are null bytes at the end of the string which it was not doing in older versions.) But that's not why i write here : I upgraded a server application from an old

Re: crlDistributionPoints with DirName value?

2003-11-04 Thread Kiyoshi Watanabe
Hi, crlDistributionPoints = DirName:/C=FI/O=SSH Communications Security Corp/CN=SSH Test CA 2 No Liabilities How about crlDistributionPoints = @crl_dist [ crl_dist ] DirName = /C=FI/O=SSH Communications Security Corp/CN=SSH Test CA 2 No Liabilities -Kiyoshi Kiyoshi Watanabe and

pkcs7 file in crypto/pkcs7/p7 and crypto/pkcs7/t

2003-11-04 Thread Jia L Wu
Hi, Can anyone tell me what file formate are the files in crypto/pkcs7/p7/ and crypto/pkcs7/t/ driectories? For the files in p7 directory, I can not load them using openssl pkcs7 command either in der or pem form. For the most files in t directory, openssl pkcs7 -text -noout returns nothing.

Re: ASN1_sign, ASN1_verify

2003-11-04 Thread Peter Sylvester
You need to set the followiong flags like for a bitstringc containing a public key: pk-public_key-flags= ~(ASN1_STRING_FLAG_BITS_LEFT|0x07); pk-public_key-flags|=ASN1_STRING_FLAG_BITS_LEFT; If not, the code assumes that a bitstring is in fact a named bit list and removes

[OpenSSL Advisory] Denial of Service in ASN.1 parsing

2003-11-04 Thread Mark J Cox
-BEGIN PGP SIGNED MESSAGE- OpenSSL Security Advisory [4 November 2003] Denial of Service in ASN.1 parsing == Previously, OpenSSL 0.9.6k was released on the 30 September 2003 to address various ASN.1 issues. The issues were found using a test suite from