openssl

Building cURL & libcurl with Visual Studio 2010

With the help of question #197444, I have managed to build cURL & libcurl from source on Windows from within the Visual Studio 2010 IDE, OpenSSL 1.0.0, and zlib 1.2.5. The problem I see is that at the moment, if I run the resulting curl.exe with the argument -V, then the version that it report is curl 7.20.1 (i386-pc-win32) libcurl/7.20...

The ordinal 968 issue

I am using openssl in a project. It works fine on one machine. However, on an xp pro machine I get: The ordinal 968 could not be located in hte dynamic link library LIBEAY32.dll Does anyone know how to fix this issue, is it a dependency issue on some other dll? ...

How to link openssl crypto lib in C++?

I am trying to test the crypto library that comes with openssl, I downloaded openssl from http://www.openssl.org/source/ and it contains a /crypto folder with subfolders for each encryption type. I wanted to try BIO_f_base64 so I created an empty console app, and added the includes needed, also added the paths to the /bio and /evp folde...

OpenSSL compatible API for Scala?

Hello, I'm working on a project with a friend. He's implementing his software in Ruby and I'm doing my stuff in Scala (with Lift). We're using some asynchronous encryption and he is using the ruby OpenSSL bindings for that: key = OpenSSL::PKey::RSA.generate(4096) self.public_key = key.public_key self.private_key = key What I'm loo...

Question about creating digital signature using OpenSSL‏(pkcs7)

I'm using OpenSSL to create digital signature fo my application but I'm getting one problem. BIO *in = NULL, *out = NULL, *tbio = NULL; X509 *scert = NULL; EVP_PKEY *skey = NULL; PKCS7 *p7 = NULL; .......................... .......................... **p7 = PKCS7_sign(scert, skey, NULL, in, flags);** I don't know how can we get digita...

OpenSSL: What does mean 'extra flags' in SSL_CIPHER to?

Hi, Looking into ssl.h\ s3_lib.c, I saw a change with the value of field in SSL_CIPHER, starting with OpenSSL 1.0: unsigned long algorithm2; /* Extra flags */ In the implementation (s3_lib.c), most of the ciphers use SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF for this flag, when in previous versions it always was set to 0. What does it mea...

Openssl - How to check if a certificate is revoked or not

With openssl library, how do i check if the peer certificate is revoked or not. from what i googled: x509 cerfiticate contains set of crl distribution points, ie set of urls download the crl from these urls crl contains serial numbers of certificates that are revoked if the peer certificate serial number is there in the crl list, then ...

Generating short license keys with OpenSSL

I'm working on a new licensing scheme for my software, based on OpenSSL public / private key encryption. My past approach, based on this article, was to use a large private key size and encrypt an SHA1 hashed string, which I sent to the customer as a license file (the base64 encoded hash is about a paragraph in length). I know someone co...

EVP_PKEY from char buffer in x509 (PKCS7)

Hi All, I have a DER certificate from which I am retrieving the Public key in unsigned char buffer as following, is it the right way of getting? pStoredPublicKey = X509_get_pubkey(x509); if(pStoredPublicKey == NULL) { printf(": publicKey is NULL\n"); } if(pStoredPublicKey->type == EVP_PKEY_RSA) { RSA *x = pStoredPubl...

setting up ssl in local server

hi, I'm developing a site using drupal.For the shopping cart section i have used ubercart here. everything is working ok in my local machine. but how can i test ssl in my local machine. can i setup that in local machine. i'm developing site in localhost and using Xampp for this. please help me if there is a way to test ssl in local...

How to verify a digital signature with openssl

I'm using a thirdparty credit card processing service (Paybox) that, after a successful transaction, redirects back to the website with a signature in the URL as a security measure to prevent people from manipulating data. It's supposed to prove that the request originated from this service. So my success URL looks something like this: ...

How to verify an XML digital signature in Cocoa?

I have a C# application that uses XML digital signatures to sign license files. I've used the standard Microsoft approach described here. I'm porting the application to the MAC and need to verify the signature. My general question is how best to do this? This is what I've done: I've used macport to install Aleksey's xmlsec1 library...

Qhttp request and response debugging.

OS: Windows XP/Vista Qt version: 4.6.1 Using OpenSSL I need to watch the actual requests and responses that is going through the wire for QHttp requests and responses and in some cases need to interrupt the request. I tried with few of the http debuggers available in the market but they seem to work only for requests that are using the ...

Heroku Create Unknown Protocol SSL Error

Hi, I'm new to Ruby and have created a site in Rails, I'm trying to run heroku create on my Windows machine and after generating a public key through git gui, I'm getting this error Uploading ssh public key C:\Users\me/.ssh/id_rsa.pub c:/ruby/lib/ruby/1.8/net/http.rb:590:in connect': unknown protocol (OpenSSL::SSL::SSLError) fr...

Delayed responses for cURL SSL PUTs/POSTs (php) (NSS vs OpenSSL)

I have two Fedora-based apache webservers making the same SSL PUT/POST calls with php/cURL. One works fine, but with the other the call succeeds but takes a VERY long time to return a response (~10 min). (GETs don't seem affected) The working server's cURL uses OpenSSL for SSL, while the non-working version uses a later version of cURL ...

How to generate RSA-SHA256 digital signature with OpenSSL libraries?

Hi, I need to generate a digital signature from C++ code, using OpenSSL libraries. I understood that I need for that DSA \ DSA_do_sign, but didn't understand how exactly to use it. Does someone have an example for that, or a reference for better than OpenSSL's supplied docs? Thanks in advance! ...

Building OpenSSL on Android NDK

Hi, I want to use DTLS (on OpenSSL) using JNI on Android 2.1/2.2. Can someone help me get started (tutorials, howto, pointers etc) with building OpenSSL for Android (2.1/2.2) using the Android NDK? Anything important that I should be aware of before doing it. Thanks. ...

How to convert PKCS#8-formatted PEM private key to the tranditional format?

Hi all, From OpenSSL 1.0 change log: Make PKCS#8 the default write format for private keys, replacing the traditional format. This form is standardised, more secure and doesn't include an implicit MD5 dependency. [Steve Henson] However, I need the private key file in the previous, traditional format. Is it po...

ld: symbol(s) not found with OpenSSL (libssl)

...

Data encrypted with openssl_public_encrypt is different every time?

why is the content of $encrypted every time different? // aquire public key from server $server_public_key = openssl_pkey_get_public(file_get_contents("C:\publickey.pem")); // rsa encrypt openssl_public_encrypt("123", $encrypted, $server_public_key); also I have tried this one $publicKey = "file://C:/publickey.pem"; $privateKey =...