Re: Testing private key - public key consistency

2006-03-15 Thread Julien ALLANOS
Alain Damiral a écrit : Verify normally verifies a certificate chain, I think this isn't quite what the original poster is trying to achieve. I think he is interested in what the SSL_CTX_check_private_key function can achieve. However I don't know if there is an OpenSSL utility that can do

Re: Testing private key - public key consistency

2006-03-15 Thread Dr. Stephen Henson
On Wed, Mar 15, 2006, Julien ALLANOS wrote: int X509_verify(X509 *a, EVP_PKEY *r); No that will check to see if the certfiicate a was signed by public key r. The function: int X509_check_private_key(X509 *x, EVP_PKEY *k) is the right one. Steve. -- Dr Stephen N. Henson. Email, S/MIME

Re: Testing private key - public key consistency

2006-03-15 Thread Kyle Hamilton
Okay. Out of curiosity, what're the functions for: 1) Verifying that a given public key (not part of an X509 structure) matches a given EVP_PKEY? 2) Extracting the public key from the EVP_PKEY (since, as I understand it, the public key is stored as part of the private key structure)? -Kyle H

Re: Testing private key - public key consistency

2006-03-15 Thread Julien ALLANOS
Dr. Stephen Henson a écrit : On Wed, Mar 15, 2006, Julien ALLANOS wrote: int X509_verify(X509 *a, EVP_PKEY *r); No that will check to see if the certfiicate a was signed by public key r. The function: int X509_check_private_key(X509 *x, EVP_PKEY *k) is the right one. Steve. Thank

RE: Testing private key - public key consistency

2006-03-06 Thread Gayathri Sundar
Probably you can try the openssl verify command? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Julien ALLANOS Sent: Monday, February 06, 2006 6:38 PM To: openssl-users@openssl.org Subject: Testing private key - public key consistency Hello, is there a

Re: Testing private key - public key consistency

2006-03-06 Thread Alain Damiral
Verify normally verifies a certificate chain, I think this isn't quite what the original poster is trying to achieve. I think he is interested in what the SSL_CTX_check_private_key function can achieve. However I don't know if there is an OpenSSL utility that can do this. Maybe verify can