I have a php script which looks for the openssl directory and encrypts customer data I have. When I upload the script to my online linux directory - the encryption works fine #private key file to use $MY_KEY_FILE = "my-prvkey.pem"; #public certificate file to use $MY_CERT_FILE = "my-pubcert.pem"; # Paypal's public certificate $PAYPA...
Hi, I have a server which would listen on HTTPS using OpenSSL. For this, I have to provide the certificate to use. However, the current implementation uses a filename to be provided to OpenSSL API. I want the cert information to be read from memory, so that I don't have to ship the certificate file opening. I tried to google, but didn't ...
I need to create an SSLSocket in ruby (1.8+) to talk to an encrypted service. I want to set ssl options on the SSLContext object. (something that eventually calls SSL_CTX_set_options in the underlying openssl library). I am not seeing any obvious way to do this. This is using the OpenSSL::SSL::SSLContext interface. As a point of refere...
Hi All, I've created an RSA key using: RSA_generate_key(2048, RSA_F4, NULL, NULL); Now I want to export the public key to another party B. Right now, I've just memcpy'd the entire RSA* struct and sent that over the wire, and B is able to use that to encrypt using RSA_public_encrypt(). But I think in this case I've actually exported t...
or is the algorithm custom implemented by Microsoft? i tested that SHA1 computed using OpenSSL on mac is equivalent to the hash computed in C# using system.security.cryptography.sha1. ...
When using OpenSSL with non blocking sockets its convenient to use the transparent negotiation mode where the negotiation is initiated by calling SSL_write on a not-yet-securely-connected SSL context, and then handling the resulting error (usually SSL_WANT_READ) to read a handshake packet from the output BIO and send it over the transpor...
I have C# code as below: private static string password = "Password"; private static string salt = "SALT"; private static string hashAlgorithm = "SHA1"; private static int iterations = 2; var saltValueBytes = Encoding.UTF8.GetBytes(salt); var passwordKey = new PasswordDeriveBytes(passwor...
We've been using M2crypto with Python 2.6 for Windows (32-bit) for some time with great success. We used one of the user contributed setups to install M2crypto in our development environments. We would like to move to Python 2.7, but noticed there are no pre-built Python 2.7 setups for m2crypto. Questions: Is M2crypto 0.20.2 compatibl...
Hello guys and gals! Openssl is a great security library and I use it from time to time. When I generate RSA keys I have RSA object with private and public key data. OK. Fine. I'm happy with that. I can print private key to the printer. And here come's the question. Is it possible to create a valid RSA object only from the entered pri...
Hi I have a x.crt file which is used to sign certain contents and a signature file is generated x.sig the x.crt is having a Certificate part which contains a public key a content signature field etc. when i try to parse the x,crt and when i try to generate a x509 certificate its showing invalid DER format if try to extract public key alo...
I have information about n,p,q where n=pq and p and q are large prime numbers to be used for the RSA algorithm. For example: n: C053094BFABF26D431CF33E028770DBB15F4AE76820B5150181F1BF42C5CF3AA7BDB459ACA77D610497F94FFA017BC07EF030E3D3450CAE7E706F352B7D7575CA6B89A5B3C953028E562F7F698C97FDD490EDF4788F073362C743B70AF2C61A17FA495E5801CC8EA1A...
I am moving my site from a tomcat only instance to an apache httd/ apache tomcat setup. I'm trying to set up the ssl with mod_ssl on apache httpd. But I don't know how to convert my tomcat keystoreFile/keystorePass to the apache httpd SSLCertificateFile/SSLCertificateKeyFile format. I am pouring over the openssl man pages with no luck...
While I know nothing about SSL or installing SSL Certificates, I'm sure one of the many results Google will give me for CentOS, SSL certs and Apache would help. However, the certificate files which have been provided for this project are a .pfx file, .cer (the certificate) file and a .txt (apparently a certificate request) file, none of...
Hey everyone, For one of roles, I've been receiving a couple of documents from people via email. It's non-sensitive data so email is fine, but I'd like to make a small portal where people can upload the files and only when they submit all the files required do I get notification that the request is complete. Regardless of content, I'd ...
I am following through the RailsCasts episode on PayPal security. I am try to port this code to C# and am using OpenSSL.NET Also is it possible to do this without using the OpenSSL wrapper library as that uses some unmanaged code? The ruby code that I am trying to port is this: def encrypt_for_paypal(values) signed = OpenSSL::PKCS7:...
OpenSSL documents state that it can safely be used in multi-threaded applications provided that at least two callback functions are set, locking_function and threadid_func.... I've written programs which use OpenSSL API. Moreover, I know how to use pthreads. However, the OpenSSL documents are written in the form of a manual, and I can't...
Hi everyone, For an application I'm developing I need to create a signature file before I can upload files. The documentation of it explains how to do this with openssl: First you need to prepare your key: $ openssl pkcs12 -in certificate.pfx -passin pass:xxxxxxxxxx -out pem -clcerts -nokeys $ openssl pkcs12 -in certificate.pfx -passi...
I receive encrypted and signed smime message. Decrypting is ok, data seems to be correct. openssl.exe smime -decrypt -in %1 -out %1_signed.txt -inkey myPrivate.pem But on verifying signature stage I get error. openssl.exe smime -verify -CAfile senderCACert.pem -certfile senderCert.pem -in %1 -out %1_plain Verification failure 7600:...
Since SSL is the backbone of the secure internet, (now technically called TLS), what are some good books I should read up on to understand all aspects of it? I suppose I'll need to learn some math, some PKI books, crypto, and Sysadmin books as well. Since that isn't a complete list I'm interested in hearing what you think is wise to lea...
I need to encrypt text (a password specifically) correctly so a 3rd party can decrypt it. They have provided me with the key they use to decrypt and told me that they will be decrypting it on their end with OpenSSL. I have been trying to get the AESManaged, and the RijndaelManaged classes in System.Security.Cryptography to create someth...