[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Generating EC keys with certtool
From: |
Nikos Mavrogiannopoulos |
Subject: |
Re: Generating EC keys with certtool |
Date: |
Thu, 10 Nov 2011 20:58:37 +0100 |
User-agent: |
Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.23) Gecko/20111010 Icedove/3.1.15 |
On 11/10/2011 08:44 PM, Fabrice Gautier wrote:
> On Thu, Nov 10, 2011 at 11:16 AM, Nikos Mavrogiannopoulos
> <address@hidden> wrote:
>> On 11/10/2011 07:48 PM, Fabrice Gautier wrote:
>>
>>> Ahah, so it happens to work on one of my machines, but not on the other two.
>>> The machine were it works is a mac running Lion, the other two are
>>> macs running SnowLeopard.
>>> I'm recompiling gnutls from source on all of them, openssl is also
>>> recompiled (either from source or through macports) so I'm guessing
>>> that something went wrong while compiling. On some machine, I used the
>>> gmp that came with macport, on others I recompiled myself, so who
>>> knows where the problem lies...
>>> Is there a way to verify a CSR with gnutls's certtool ?
>>
>> What do you mean verify a CSR? Verify the self signature? That is being
>> done automatically when it is signed.
> Ah yes, I see that. Openssl has a command to verify without signing.
> The reason I'm not using certtool to generate the request is that I
> already had a script to generate certs using openssl. The only reason
> I used certtool for the key was that gnutls does not read openssl ec
> keys (Thats the issue I reported a few days ago).
> After investigating, it appears that the problem lies in gnutls
> generating a bad EC key on the BAD system. Both gnutls and openssl (on
> both GOOD and BAD systems) will happily generate a CSR using that bad
> key, but both will fail the verification when trying to sign the CSR.
Can you send me that (bad) key? What kind of system is the BAD system?
regards,
Nikos
- Generating EC keys with certtool, Fabrice Gautier, 2011/11/10
- Re: Generating EC keys with certtool, Nikos Mavrogiannopoulos, 2011/11/10
- Re: Generating EC keys with certtool, Fabrice Gautier, 2011/11/10
- Re: Generating EC keys with certtool, Fabrice Gautier, 2011/11/10
- Re: Generating EC keys with certtool, Nikos Mavrogiannopoulos, 2011/11/10
- Re: Generating EC keys with certtool, Fabrice Gautier, 2011/11/10
- Re: Generating EC keys with certtool,
Nikos Mavrogiannopoulos <=
- Re: Generating EC keys with certtool, Nikos Mavrogiannopoulos, 2011/11/10
- Re: Generating EC keys with certtool, Fabrice Gautier, 2011/11/10
- Re: Generating EC keys with certtool, Fabrice Gautier, 2011/11/10
- Re: Generating EC keys with certtool, Nikos Mavrogiannopoulos, 2011/11/10
- Re: Generating EC keys with certtool, Fabrice Gautier, 2011/11/11
- RE: Generating EC keys with certtool, Hoyt, David, 2011/11/11
- Re: Generating EC keys with certtool, Nikos Mavrogiannopoulos, 2011/11/10