Re: Verify signature (ECDSA_do_verify) using only x-coordinate in public key (EC_POINT)?

2013-09-06 Thread Jonas Andersson
Hi, Thanks for your response. I'm sure that I only have the x-coordinate and when I reed up on ecc, it seems to be possible to verify the signature by only using this x-coordinate. Is there a way to do this with OpenSSL? Br, Jonas 2013/9/3 Matt Caswell fr...@baggins.org On 3 September 2013

smime sign and id-aa-signingCertificateV2

2013-09-06 Thread Ottavio Campana
I am using openssl to sign files using a security token. The command that I use is OpenSSL smime -md sha256 -nodetach -binary -outform DER -sign -signer my.pem -inkey id_ -keyform engine -in test.txt -out test.p7m -engine pkcs11 and it works. The application that I use to verify the

openSSL OCSP utility not sending OCSP Response when connect call is non-blocking.

2013-09-06 Thread deepak.kathuria
Hi, I am using openSSL OCSP utility as server. Whenever I do a blocking TCP connect to establish TCP connection with openSSL OCSP utility and then send OCSP request , openSSL OCSP utility sending a OCSP response. But when I do a non blocking TCP connect make sure that OCSP request is written

Re: Verify signature (ECDSA_do_verify) using only x-coordinate in public key (EC_POINT)?

2013-09-06 Thread Matt Caswell
On 6 September 2013 07:22, Jonas Andersson jonasanderssonm...@gmail.com wrote: Hi, Thanks for your response. I'm sure that I only have the x-coordinate and when I reed up on ecc, it seems to be possible to verify the signature by only using this x-coordinate. Is there a way to do this with

32-bit Windows rebasing of OpenSSL FIPS library

2013-09-06 Thread Perrow, Graeme
I am having trouble loading the OpenSSL FIPS DLLs (2.0.5, using OpenSSL 1.0.1e) in my 32-bit Windows application. Most of the time I get a fingerprint does not match error from FIPS_mode_set but now and again, with no code changes, it succeeds. I have a feeling it has to do with rebasing and

Version difference

2013-09-06 Thread Walter H.
Hello, can someone please tell me the difference between OpenSSL x.x.x any date and OpenSSL x.x.x-fips any date is there a difference in functionality? is there a difference in legality? what does it tell to me, when openssl version shows fips, and what does it tell, when openssl version

PKCS7 signing

2013-09-06 Thread Ken Goldman
I'm working through the 'openssl smime -sign' example. 1 The '-in' parameter appears to be the message, not a hash of the message. Correct? 2 When I run the example, the PKCS7_Sign() call appears to add the entire message to the pkcs7 DER encoded file. Is this typical? Can I pass in

Re: PKCS7 signing

2013-09-06 Thread Dr. Stephen Henson
On Fri, Sep 06, 2013, Ken Goldman wrote: I'm working through the 'openssl smime -sign' example. 1 The '-in' parameter appears to be the message, not a hash of the message. Correct? Yes. 2 When I run the example, the PKCS7_Sign() call appears to add the entire message to the