RE: verify certificate in c

2010-07-04 Thread Jeremy Farrell
> From: Behalf Of Michael S. Zick > Sent: Saturday, July 03, 2010 6:51 PM > > On Sat July 3 2010, Dr. Stephen Henson wrote: > > On Sat, Jul 03, 2010, belo wrote: > > > > > > Damn! > > > how can be possible that in the official openssl > > > documentation there's > > > nothing about this OpenSSL_

ENGINE: RSA_METHOD->rsa_keygen does not behave like other function pointers

2010-07-04 Thread Jeff Saremi
To avoid having to override every RSA function, I could fill my engine's custom RSA_METHOD with methods from RSA_PKCS1_SSLeay. Alternatively I could have my functions wrap the internal OpenSSL functions. For instance: int myEngineRsaModExp(BIGNUM *r0,const BIGNUM *I,RSA *rsa,BN_CTX *ctx) { int rc

Re: openssl & Window's Crypt library

2010-07-04 Thread Mark Bishop
That confirms *exactly* (especially the ASN integers) what I am seeing. I am able to move forward now with this info. Thank you for the help. Quoting Jeffrey Walton : Hi Mark, I think I need to pull some data out of the header in the openssl DER file and put it into the key BLOB (BL

Re: openssl & Window's Crypt library

2010-07-04 Thread Jeffrey Walton
Hi Mark, > I think I need to pull some data out of the header in the openssl DER file > and put it into the key BLOB (BLOBHEADER/RSAPUBKEY) structure in Windows. When you pluck the various ASN Integers out of the DER encoded key file, the integers have to be baked a bit before inserting into the B

Serials and root certificates

2010-07-04 Thread Jon Kristensen
Currently, I'm using openssl req -x509 to create root certificates and openssl x509 to create all other certificates. I'm using the openssl x509 parameters -CAserial and -CAcreateserial to let OpenSSL automatically increment and manage the serial number upon updating the non-root certificates.

ENGINE: where are corresponding 'save' methods for ENGINE_set_load_pub/privatekey_function?

2010-07-04 Thread Jeff Saremi
How does one provide own engine functions for saving public and private keys? thanks jeff This email contains Morega Systems Inc. Privileged and Confidential information. __ OpenSSL Project http:/

Re: Large CRL Handling Problem

2010-07-04 Thread Ger Hobbelt
On Sat, Jul 3, 2010 at 12:31 AM, Ryan Smith wrote: > However with the ~200MB CRL, I get the following error, > > 1418976:error:0D078064:asn1 encoding routines:ASN1_ITEM_EX_D2I:aux > error:tasn_dec.c:407:Type=X509_CRL_INFO > > 1418976:error:0D08303A:asn1 encoding routines:ANS1_TEMPLATE_D2I:nested