RE: Extracting Public Key from .CER file

2007-02-13 Thread kamalakar.mergu
Usually in RSA cryptography, when you append private key to the Manufacturer's certificate becomes public key. Find the attached files for reference Regards Kamal From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ravi Bhatt Sent:

Re: Extracting Public Key from .CER file

2007-02-13 Thread Christian Hohnstaedt
On Mon, Feb 12, 2007 at 05:53:56PM -0800, Ravi Bhatt wrote: Hello, I want to use the Open SSL function call to extract the Public Key from the Manufacturers X.509 Certificate, which is in the .CER format. Could someone please advise me? fp = fopen(); c = PEM_read_X509(fp, NULL, NULL,

Sign using RSA-SHA1

2007-02-13 Thread Kaushalye Kapuruge
Hi List, I need to sign a text using RSA-SHA1. ( http://www.w3.org/2000/09/xmldsig#rsa-sha1 http://www.w3.org/2000/09/xmldsig#rsa-sha1 as per XML-Signature specification http://www.w3.org/TR/xmldsig-core/) I found a set of EVP_ functions to do this. i.e. EVP_SignInit (md_ctx, EVP_sha1());

Re: My ssl client connects without the knowledge of root CA certificate

2007-02-13 Thread Urjit Gokhale
Hello, Could someone help me understand what is happening here? ~ Urjit - Original Message - From: Urjit Gokhale [EMAIL PROTECTED] To: openssl-users@openssl.org Sent: Thursday, January 18, 2007 9:13 PM Subject: Re: My ssl client connects without the knowledge of root CA certificate

Re: My ssl client connects without the knowledge of root CA certificate

2007-02-13 Thread Bernhard Froehlich
Urjit Gokhale schrieb: Hello, Could someone help me understand what is happening here? It's important to realize that the client decides wether to accept a server's certificate or not! If you want OpenSSL to do the standard client's job (that is, check if the server has a certificate,

Re: My ssl client connects without the knowledge of root CA certificate

2007-02-13 Thread Marek Marcola
Hello, Could someone help me understand what is happening here? ~ Urjit - Original Message - From: Urjit Gokhale [EMAIL PROTECTED] To: openssl-users@openssl.org Sent: Thursday, January 18, 2007 9:13 PM Subject: Re: My ssl client connects without the knowledge of root CA

Re: My ssl client connects without the knowledge of root CAcertificate

2007-02-13 Thread Urjit Gokhale
Hello Marek, Bernhard, Thank you for your help. I will try SS_CTX_set_verify(). Thank you once again. ~ Urjit - Original Message - From: Marek Marcola [EMAIL PROTECTED] To: openssl-users@openssl.org Sent: Tuesday, February 13, 2007 4:36 PM Subject: Re: My ssl client connects without the

SSL Scaling Question

2007-02-13 Thread Eric Johnson
Hi. I'm new to this forum and was wondering if I could get some assistance. I have an SSL Acceleration device that is comparable of supporting 50,000 concurrent connections. I would like to put this in my lab here at work and test the upper limit of this device. I'm concerned about the backend web

Re: SSL Scaling Question

2007-02-13 Thread Rick Jones
Eric Johnson wrote: Hi. I'm new to this forum and was wondering if I could get some assistance. I have an SSL Acceleration device that is comparable of supporting 50,000 concurrent connections. I would like to put this in my lab here at work and test the upper limit of this device. I'm

RE: SSL Scaling Question

2007-02-13 Thread Tim . Metzinger
If all you are going to do to test the accelerator/server combination is fetch some static content, then your job is fairly easy: Load-test the server using HTTP connections fetching the static content, until you either reach a server bottleneck (CPU/Memory/IO) or achieve your max number of

Re: Sign using RSA-SHA1

2007-02-13 Thread Nils Larsch
Kaushalye Kapuruge wrote: Hi List, I need to sign a text using RSA-SHA1. ( http://www.w3.org/2000/09/xmldsig#rsa-sha1 http://www.w3.org/2000/09/xmldsig#rsa-sha1 as per XML-Signature specification http://www.w3.org/TR/xmldsig-core/) I found a set of EVP_ functions to do this. i.e.

Re: BIO_read(), SSL_read(), return values

2007-02-13 Thread Perry L. Jones
you might want to take a look at the functions SSL_pending - (tells you there is data to read on the SSL socket before trying to read ) BIO_pending Perry Milan Křápek wrote: Hi, I have a question. I have multithread system, with non blocking I/O and perhaps 100 connections to servers. I

Questions about Certificate Verification

2007-02-13 Thread Randall Hand
I'm somewhat new to OpenSSL (and SSL in general) and I'm attempting to use it to encrypt an existing socket communication system in an application we use. After a morning of experimenting, I've successfully written a small experimental Server Client app that simply sends a Hello World across an

Re: Questions about Certificate Verification

2007-02-13 Thread Marek Marcola
Hello, But one thing I don't understand is why both the RSA Private Key Certificate must exist on both ends of the connection. I'm used to using RSA DSA keypairs in SSH, and had assumed something similar would work here. I *thought* that the Private Key would exist on the Server, while

OpenSSL newbie

2007-02-13 Thread Tommy W
Hi I'm about to develop a server application which should be able to handle ALOT of connections, say 20k-30k Any suggestions as to how I should tackle this problem? I am really new with OpenSSL and haven't really grasped it all yet. I've been searching the net for a couple of days now just to find

Re: Questions about Certificate Verification

2007-02-13 Thread Randall Hand
WEll, I understand the SSH way as I use it regularly, but I'm having a hard time finding documentation and examples on the SSL way to do this. Do you have any code examples, or know where I might find some? I managed to figure out how to do DH matching, which gives me encryption but no

RE: OpenSSL newbie

2007-02-13 Thread David Schwartz
I'm about to develop a server application which should be able to handle ALOT of connections, say 20k-30k Any suggestions as to how I should tackle this problem? It takes a lot of experience to develop a system that can handle more than 10,000 simultaneous connections. I don't think it's

Re: OpenSSL newbie

2007-02-13 Thread Tommy W
I'm about to develop a server application which should be able to handle ALOT of connections, say 20k-30k Any suggestions as to how I should tackle this problem? It takes a lot of experience to develop a system that can handle more than 10,000 simultaneous connections. I don't think it's

Reusing a certificate store

2007-02-13 Thread Shmulik Regev
Hi, The existing SSL_CTX implementation associates a new certificate store with each SSL_CTX. However, assuming the certificate store is static, i.e. after reading the certificates (for example from a PEM file) it doesn't change, there is at least conceptually a room for sharing it among

RSA encryption and decryption performance difference between pkcs11 engine and default engine on windows and solaris

2007-02-13 Thread AD D
Hi, I use openssl RSA encrypt and decrypt both on windows 2003 and solaris (amd64 and sparc T2000). I wrote some performance test code like gettimeofday(tpsbegin, NULL); for (i = 0; i 100; i++) { r = RSA_public_encrypt(245, plain_data, enc_data, key,

Re: Questions about Certificate Verification

2007-02-13 Thread Bernhard Froehlich
Randall Hand schrieb: WEll, I understand the SSH way as I use it regularly, but I'm having a hard time finding documentation and examples on the SSL way to do this. Do you have any code examples, or know where I might find some? I managed to figure out how to do DH matching, which gives me