I've been reading about Stanford's Secure Remote Password protocol, and it looks ideal for the sort of environment in which iPhone apps run. Unfortunately, I haven't been able to find a good Objective-C implementation of the protocol. Nor, as far as I can tell, do the crypto libraries in the SDK implement it. Does anyone know of such an...
I'm trying to verify a file that was signed by hashing with SHA-1 and encrypting the hash with an RSA private key. Obviously I'm using the RSA public key to verify. The key is in DER format. The signature verification works correctly using Java's Signature class. The openssl command I'm trying (and the result) is: ~/Downloads...
how to setup openssl at the mysql? "have_ssl" disabled; how to enable it? " mysql> SHOW VARIABLES LIKE 'have_ssl'; If the value is YES, the server supports SSL connections. If the value is DISABLED, the server supports SSL connections but was not started with the appropriate --ssl-xxx options" there is not very clear. how to enable i...
The not-yet-commons SLL package for Java provides an OpenSSL object with a method for password based encryption: encrypt("des", password, data); This method is said to be compatible with the OpenSSL C library. My question is, what is the OpenSSL C++ method equivalent to the above Java? Thanks ...
I'm trying to use Ruby's SOAP support as follows: SERVICE_URL = 'https://...' ... def create_driver ::SOAP::WSDLDriverFactory.new(SERVICE_URL).create_rpc_driver driver.options['protocol.http.ssl_config.verify_mode'] = OpenSSL::SSL::VERIFY_NONE driver.options['protocol.http.ssl_config.client_cert'] = @certificate_path driver en...
I've gotten my WCF webservice running with basic self-signed certificates generated by makecert (using some of the many online tutorials on the subject) but have found that there are certain capabilities that we require when generating certificates that makecert does not seem to handle. As such I'm trying to create my certificates using ...
Hai all, i successful configured a self signed SSL certificate and configure it in the MAMP server, now if i type https://localhost:443/ it will show the certificate, now i would like to configure a httpsdocs (like htdocs) and implement a secure login, can any one help me to run a simple page using SSL ...
haskell 'openid' package depends on HsOpenSSL and nano-hmac packages which requires openssl. I've compiled openssl for MinGW in C:\OpenSSL\ directory and installed openid package with following command: cabal install openid --extra-include-dirs=C:\OpenSSL\outinc --extra-lib-dirs=C:\OpenSSL\out When I'm trying to compile haskell progra...
My root certificates are stored as several files in ASN.1 format. Assume I have a chained end entity certificate in the same format. How do I efficiently determine the root certificate of this certificate? Currently I have to take a brute force approach which extracts the public key of the end entity certificate and validates that agai...
hi all I have successfully linked my QT application with openssl and I can use it in my application now. But qmake makes an strange error when it reaches my openssl function use(it seems to be a compile one,but it is even shown in error list like normal ones): make[1]: *** [\S60\devices\S60_5th_Edition_SDK_v1.0\EPOC32\BUILD\Pir\Carbide\...
All, It is possible to use IIS (or similar) to handle the ssl side of https communications. Is there something similar that can handle the ssl side of a TCP/IP message? Basically I have a client device sending a non-http message over a TCP connection and want a server that can handle the crypto and certificate side of SSL for me and fo...
I have the following function in Ruby that decrypts a bit of data: def decrypt(key, iv, cipher_hex) cipher = OpenSSL::Cipher::Cipher.new('aes-256-cbc') cipher.decrypt cipher.key = key.gsub(/(..)/){|h| h.hex.chr} cipher.iv = iv.gsub(/(..)/){|h| h.hex.chr} decrypted_data = cipher.update(cipher_hex.gsub(/(..)/){|h| h....
I'm using a third party static library in my C++ project that has a dependency on libssl version 0.9.7a. Due to various reasons, the libssl version that my project used is 0.9.8e. Everything was working fine, until the third party made a recent change to their static library. I wasn't able to successfully compile my application when it ...
For various reasons I have created a simple HTTP server, and added SSL support via OpenSSL. I'm using self-signed certificates. IE, FireFox and Chrome happily load content as long as I add the CA to the trusted root CA's. However, wget (even when using the --no-check-certificate flag) reports: OpenSSL: error:14094410:SSL routines:SSL...
Hi, I'm using the openssl utility of debian in order to create a certificate. The certificate paramemters are given in a configuration file, which is made of key-value pairs. My problem is that I want one of the values to include the number sign (#). But openssl handles this sign as a beginning of comment, i.e. if my value is val#1, o...
I am trying to create an object-signing certificate myself instead of paying Verisign or some other company hundreds of dollars. I am using linux (specifically 64bit OpenSUSE 11.1) so it would be best if I could create it in that environment. I have successfully created self-signed certificates for Apache to use for https connections usi...
There doesn't seem to be any sort of standard naming convention for OpenSSL certificates, so I'd like to know if there's a simple command to get important information about any OpenSSL certificate, regardless of type. I'd like to know at least the certificate type (x509, RSA, DSA) and whether it's a public or private key. Looking at the ...
Hi, I'm writing an application for Mac. I need some code which generates a hash from a string. I need to create these hashes: MD2 MD4 MD5 SHA-0 SHA-1 How can I do this? Thanks. ...
Hi all, what's the Ruby OpenSSL library equivalent of the following command? openssl pkcs12 -clcerts -nodes -in apns.p12 -out apns.pem I've been reading through the documentation that I could find, but it's so sparsely documented and I'm not having much luck with that. Thanks! ...
I need to figure out how to get two OpenSSL functions for iPhone. I'm trying to keep it so I don't need another dylib, because I don't want Apple to reject my application for something so silly. Anyways, I have an app that access an API, not one of my APIs, so I can't really change it, and also, I don't want anyone to know my public key...