RE: verify self signed x.509

2013-05-08 Thread redpath
Nothing like forgetting to add Algorithms which was the issue ERR_load_BIO_strings(); ERR_load_crypto_strings(); OpenSSL_add_all_algorithms(); OpenSSL_add_all_ciphers(); OpenSSL_add_all_digests(); basically get the public key testrsa = RSA_new(); FILE *fp = fopen("x509public.pem", "r"); if

RE: verify self signed x.509

2013-05-08 Thread Salz, Rich
> 4) But the life of me cannot find how to set the public and verify? Look for one of the openssl command-line programs that does what you want, and then look at that code. In this case apps/verify.c might be useful. /r$ -- Principal Security Engineer Akamai Technology Cambridge, MA

RE: verify self signed x.509

2013-05-08 Thread redpath
Okay so excerpt code shown below. 1) Load the RSA public key 2) Load the x509 3) Create an PKEY 4) But the life of me cannot find how to set the public and verify? I did try a number of functions to set public key with core dump of course. This is just a test sample. testrsa = RSA_new();

RE: verify self signed x.509

2013-05-08 Thread Salz, Rich
> How can this individual verify the x.509? I certainly do not want the > receiving site to have private key; they are not the creator of such > documents but simply the receiver for data. An excerpt of code would be most > beneficial. The certificate is signed with the PRIVATE key and verified