TLS CA Certificate Loading in DER format

2009-09-11 Thread Chaitra Shankar
Hi, I am to use TLS for securing an application's data transfer. For development purposes I have been using a dummy set of certificates in PEM format. The currently used "SSL_CTX_load_verify_locations" API requires that the certificate be in PEM format. However, in real time scenario,

Re: RSA OAEP encrypt with a label

2009-09-11 Thread Einar Thorsrud
Thank you Martin. I have tried using the function, however using the code I have pasted below I get the error Error = oaep decoding error when trying to unpadd to retrieve the original data. For simplicity the code I have added here does not encrypt/decrypt, but only attempts to pad and unpadd.

Re: How to re-use a socket with a new SSL session?

2009-09-11 Thread Victor Duchovni
On Fri, Sep 11, 2009 at 12:51:15PM +1000, Andrew Sumner wrote: Victor, you've just described exactly what I've been trying to do. A clean shutdown on both sides, socket connection left open, then a client HELLO after which both sides initiate SSL again. I just can't seem to find a method of

load certificate into rsa

2009-09-11 Thread Michael Prinzinger
Dear Group, I want to use the openssl crypt library to sign and verify messages. Apparently I can use a RSA struct and RSA_sign and RSA_verify for that. however my certificates are of the form -BEGIN CERTIFICATE- MIIDDTCCAnagAwIBAgIJAMWKwoNrQvTvMA0GCSqGSIb3DQEBBQUAMGMxCzAJBgNV ...

Re: load certificate into rsa

2009-09-11 Thread Dr. Stephen Henson
On Fri, Sep 11, 2009, Michael Prinzinger wrote: Dear Group, I want to use the openssl crypt library to sign and verify messages. Apparently I can use a RSA struct and RSA_sign and RSA_verify for that. however my certificates are of the form -BEGIN CERTIFICATE-

Re: A PKI in a web page

2009-09-11 Thread jehan procaccia
Actually I am looking for a simple software with command line interface to operate a CA, sub-CA then client and server certs, that is eventually capable of publishing into the web public certs and crl / policies. If I can't find a package around openssl, I will probably end up using direct

Re: A PKI in a web page

2009-09-11 Thread Kyle Hamilton
CSP-0.34 dates from 2007. ftp://ftp.su.se/pub/users/leifj/ is where it can be found. You're using either 0.31 or 0.32, if you're using one with a date from 2005. -Kyle H On Fri, Sep 11, 2009 at 8:24 AM, jehan procaccia jehan.procac...@it-sudparis.eu wrote: Actually I am  looking for a simple