Re: [openssl-users] Getting certificates from smartcards

2015-07-22 Thread Anirudh Raghunath
, Anirudh Raghunath anirudhraghun...@rocketmail.com wrote: Shoot, I need that functionality. Can I perhaps use the X509 *load_cert(BIO *err, const char *file, int format, const char *pass, ENGINE *e, const char *cert_descrip) function then? If yes, then can someone elaborate on how to use

Re: [openssl-users] Converting Bin format to X509 format

2015-07-22 Thread Anirudh Raghunath
question. Cordialement,Erwann Abalea Le 22 juil. 2015 à 11:17, Anirudh Raghunath anirudhraghun...@rocketmail.com a écrit : Hello, I have used rsault -sign option to sign a text file which gives me a binary file. I would like to convert this to X509 so that I can use it in a ssl handshake. I

Re: [openssl-users] Converting Bin format to X509 format

2015-07-22 Thread Anirudh Raghunath
09:17:43 + (UTC) Anirudh Raghunath anirudhraghun...@rocketmail.com wrote: Hello, I have used rsault -sign option to sign a text file which gives me a binary file. I would like to convert this to X509 so that I can use it in a ssl handshake. I understand the command: openssl x509 -inform

[openssl-users] Sending files in SSL communication

2015-07-22 Thread Anirudh Raghunath
Hello all, I have a ssl server client connection set up which I have written in C using sockets and openssl. I understand that I can attach a certificate of the server and send it to the client by attaching it to the SSL_CTX object. I used the SSL_CTX_use_certificate_file to do so. Now I can

Re: [openssl-users] Sending files in SSL communication

2015-07-22 Thread Anirudh Raghunath
But there is a way in which the server sends a test( for example a random number) and the client signs it with his private key right? On Wednesday, 22 July 2015 1:30 PM, Anirudh Raghunath anirudhraghun...@rocketmail.com wrote: But is there a way to send text files through SSL_write

Re: [openssl-users] Sending files in SSL communication

2015-07-22 Thread Anirudh Raghunath
But is there a way to send text files through SSL_write()? If so, can you please give a small example? Thanks. On Wednesday, 22 July 2015 1:27 PM, Salz, Rich rs...@akamai.com wrote: What you want is application-specific, not part of the TLS protocol.  So you have to use

[openssl-users] Converting Bin format to X509 format

2015-07-22 Thread Anirudh Raghunath
Hello, I have used rsault -sign option to sign a text file which gives me a binary file. I would like to convert this to X509 so that I can use it in a ssl handshake. I understand the command: openssl x509 -inform format -in certfile -out cert.pem  is used. I want to know what the parameters

Re: [openssl-users] Getting certificates from smartcards

2015-07-21 Thread Anirudh Raghunath
, Victor Wagner vi...@wagner.pp.ru wrote: On Tue, 21 Jul 2015 13:58:21 + (UTC) Anirudh Raghunath anirudhraghun...@rocketmail.com wrote: Ah okay, that clears up quite a lot of doubts. But the certificate I want to load is a self signed certificate which has a private key attached to it. I

[openssl-users] Loading pkcs11 engine opensc without using command line

2015-07-16 Thread Anirudh Raghunath
Hello, I want to write a program in which I can load a certificate from a smartcard instead of having it in a file on the client machine. In order to do so I will be using the opensc's engine_pkcs11 module. The module works fine using the shell but I want to implement it as an independent

[openssl-users] Getting certificates from smartcards

2015-07-21 Thread Anirudh Raghunath
Hello, I would like to utilize the ENGINE_load_ssl_client_cert() function to load a certificate from my smart card. I have successfully loaded the engine and have also tried to play around with the ENGINE_load_private_key() function. It worked successfully and I was able to get the private key

Re: [openssl-users] Getting certificates from smartcards

2015-07-21 Thread Anirudh Raghunath
in this case? Thanks. On Tuesday, 21 July 2015 2:40 PM, Dr. Stephen Henson st...@openssl.org wrote: On Tue, Jul 21, 2015, Victor Wagner wrote: On Tue, 21 Jul 2015 06:58:24 + (UTC) Anirudh Raghunath anirudhraghun...@rocketmail.com wrote: As far as I can understand