Certificate format conversion APIs

2013-05-20 Thread Rahul Godbole
Hi OpenSSL Users Can someone tell me API using which I can convert certificates from one format to another? I know that the openssl command can be used for the same but that is not an option for me...I have to do it in code Thanks Rahul

Re: Certificate format conversion APIs

2013-05-20 Thread Saurabh Pandya
your stuff is here.. http://www.openssl.org/docs/crypto/pem.html happy reading ! On Mon, May 20, 2013 at 12:20 PM, Rahul Godbole rahulmg1...@gmail.comwrote: Hi OpenSSL Users Can someone tell me API using which I can convert certificates from one format to another? I know that the openssl

AES using cryptodev driver

2013-05-20 Thread Gnanasekar R
Hi, Has anyone tried using cryptodev driver and seen it to be better than AES computation in OpenSSL libs. I instrumented the time using evp_test app and see that AES computation using cryptodev is ~1.6ms slower compared to running the app without cryptodev driver, in my system. So I would like

How to create CSR with SN attribute

2013-05-20 Thread Per Edlund
Hi! Is there a way with openssl to create a key/csr with SN attribute? As I can see, only CN, O, OU etc are available. If not with openssl, does anyone know another tool to create this with? Kind regards /Per signature.asc Description: Message signed with OpenPGP using GPGMail

RE: How to create CSR with SN attribute

2013-05-20 Thread Salz, Rich
Is there a way with openssl to create a key/csr with SN attribute? As I can see, only CN, O, OU etc are available. If not with openssl, does anyone know another tool to create this with? You can do it. The 'trick' is that you have to have a default value, so put SN=unknown in the global

Re: How to create CSR with SN attribute

2013-05-20 Thread Viktor Dukhovni
On Mon, May 20, 2013 at 05:58:43PM +0200, Per Edlund wrote: Is there a way with openssl to create a key/csr with SN attribute? [dn_req] surname = Smith Likewise with the -subj option use: -subj /surname=Smith. or -subj /SN=Smith. As I can see, only CN, O, OU etc are

FIPS 2.0.2 and DSA self test

2013-05-20 Thread no_spam_98
I'm wondering why the FIPS_selftest_dsa() function in fips_dsa_selftest.c uses EVP_sha384 with a 2048-bit DSA key during the fips_pkey_signature_test()? If I'm reading the NIST standards (FIPS 186-3 and SP 800-57 Part 1) correctly, it looks like it is more usual for 2048-bit DSA keys to be

Re: Build error with 1.0.1e on Win64 with VC++ 2010 and nasm

2013-05-20 Thread Phillip Hellewell
On Thu, May 16, 2013 at 5:27 PM, Phillip Hellewell ssh...@gmail.com wrote: But do I have to sacrifice performance to be able to upgrade to 1.0.1? Anyone? Can I be the only one in the whole world who wants to build openssl on Windows 64-bit with optimized assembly routines? Should I try to

Re: Question regarding openssl program to compute the hashes and finger-prints.

2013-05-20 Thread Khadija Amin (khamin)
Re-trying.. From: Microsoft Office User kha...@cisco.commailto:kha...@cisco.com Date: Mon, 13 May 2013 23:34:56 -0700 To: openssl-users@openssl.orgmailto:openssl-users@openssl.org Subject: Question regarding openssl program to compute the hashes and finger-prints. Hello All , I have a question

Re: Question regarding openssl program to compute the hashes and finger-prints.

2013-05-20 Thread Stan Joyner
Per this web page the hash algorithm did change if I understand your question correctly. http://www.openssl.org/docs/apps/x509.html I think c_rehash uses -subject_hash as the option. These options allow you to use the old hash from the command line. Don't know how to get c_rehash to do this.

Re: How to create CSR with SN attribute

2013-05-20 Thread Per Edlund
Thanks On 20 maj 2013, at 18:13, Salz, Rich rs...@akamai.com wrote: Is there a way with openssl to create a key/csr with SN attribute? As I can see, only CN, O, OU etc are available. If not with openssl, does anyone know another tool to create this with? You can do it. The 'trick' is

RE: Question regarding openssl program to compute the hashes and finger-prints.

2013-05-20 Thread Jeremy Farrell
Jakob Bohm gave a complete answer a few hours after your original question, see http://openssl.6102.n7.nabble.com/Question-regarding-openssl-program-to-compute-the-hashes-and-finger-prints-tt45095.html#none From: Khadija Amin (khamin) [mailto:kha...@cisco.com] Sent: Monday, May 20, 2013

Re: Build error with 1.0.1e on Win64 with VC++ 2010 and nasm

2013-05-20 Thread Phillip Hellewell
On Mon, May 20, 2013 at 1:12 PM, Phillip Hellewell ssh...@gmail.com wrote: Should I try to patch it myself? FYI, the linker error is occurring because nasm is failing with a ton of errors on x86_64-g2m.asm, I think maybe because it is creating the wrong type of asm. So I tried masm instead, and

RE: Build error with 1.0.1e on Win64 with VC++ 2010 and nasm

2013-05-20 Thread Jeremy Farrell
It might be better if you specify how you set up your environment, what versions of perl and nasm you used, and what sequence of commands you used. I usually do a cut-down static build in an environment based on the Windows Driver Kit, and I've built 1.0.1e using nasm without problems. I just