Re: OpenSSL with OpenPGP

2010-06-06 Thread Mounir IDRASSI
Hi, I have written a small program that demonstrates how an RSA public key can be extracted from an OpenPGP public key file and used in OpenSSL. You can get the source from the following link : http://www.idrix.fr/Root/Samples/pgp_pubkey.c I hope this will help. Cheers, -- Mounir IDRASSI IDRIX

Question about custom X509 extensions

2010-06-06 Thread decoder
Hello, I am currently developing an application that stores custom data in the X509 client certificate. Some of this data is binary and I managed to store it in a custom extension. Initially, I encoded this data using i2s_ASN1_OCTET_STRING() to obtain a hex encoded version. When viewing the

Re: NameConstraints are not being applied (or I don't know how to enforce them?)

2010-06-06 Thread Dr. Stephen Henson
On Sat, Jun 05, 2010, jeff wrote: I did a little debugging and managed to fix on my end. The issue is now resolved. There's nothing wrong with OpenSSL1.0.0's handling of nameConstraints. It just Rocks! Thank you for the update. When I wrote it it was checked against the RFC3280 compliance

building for osf1/tru64

2010-06-06 Thread Jay K
openssl 1.0 on OSF/1 5.1: don't know how to make alphacpuid.o openssl .9 on OSF/1 5.1: cc: Info: bn_nist.c, line 744: In this statement, an array subscript expression is either less than zero or greater than the largest value that can be represented by the size_t type. (badsubscript)    

Doubts about generic certs (*.mydomain.com)

2010-06-06 Thread Andre Rodrigues
Hi, Are there any constraints about generic certs usage? Do I need to inform the FQDN I have in the SAN? All the browsers know how to handle them? Can you point me any docs about this type of cert?   Thanks, Andre __