Re: ECDSA-with-sha256

[Massimiliano Pala-3]

Hello Sunil,

answers inline...

On 10/2/09 3:32 PM, Trivedi, Sunil J. wrote:
> Hello Max,
>
> I read the subject email thread on nabble.com; I am also trying to
> generate ECC certificates and CRLs signed with
>
> ECDSA-with-SHA256.

I guess with OpenSSL.. right ?

> My situation: Excuse my ignorance, but currently I am using “OpenSSL
> 0.9.8k 25 Mar 2009” binaries downloaded from the OpenSSL site. I am not
> a programmer/software engineer by trade; but more into systems engineering.
>
> Question 1: I can’t find 0.9.9 SNAP at ftp://ftp.*openssl*.org/snapshot/
> <ftp://ftp.openssl.org/snapshot/> ; I can see 1.0.0-stable-SNAP

You can download the latest stable version of OpenSSL from:

        ftp://ftp.openssl.org/source/

the latest "almost final" version is openssl-1.0.0-beta3.tar.gz. I think
you can use that safely.

> and 0.9.8-stable-SNAP. And then other tar balls without version numbers
>
> Question 2: After downloading one of those SNAP, I assume, I have to
> compile from scratch. Is it possible to share some simple instructions
> so that I can try on my own or with some help from a local software
> engineer can come up with 0.9.9 SNAP or equivalent binaries.

Actually it is very simple to compile openssl from scratch, you simply have
to do the following:

        $ cd Downloads/           <---- directory where you downloaded it
        $ tar xvfpz openssl-1.0.0-beta3.tar.gz
        $ cd openssl-1.0.0-beta3
        $ ./config --prefix=/usr
        $ make
        $ sudo make install       <---- you need to be root to install it

That will do the trick.

In addition to it, if you want to speedup the development of applications
that use PKIs you might want to consider LibPKI. You can find a description
(that we need to update) here:

        http://www.openca.org/projects/libpki/
        http://mm.cs.dartmouth.edu/wiki/index.php/LibPKI

and the last packages here:

        http://ftp.openca.org/libpki/

I hope that will help :D



--

Best Regards,

        Massimiliano Pala

--o------------------------------------------------------------------------
Massimiliano Pala [OpenCA Project Manager]                   openca@...
                                                  project.manager@...

Dartmouth Computer Science Dept               Home Phone: [phone]
PKI/Trust Laboratory                          Work Phone: [phone]
--o------------------------------------------------------------------------
People who think they know everything are a great annoyance to those of us
who do.
                                                           -- Isaac Asimov



------------------------------------------------------------------------------
Come build with us! The BlackBerry® Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9-12, 2009. Register now!
http://p.sf.net/sfu/devconf
_______________________________________________
Openca-Users mailing list
Openca-Users@...
https://lists.sourceforge.net/lists/listinfo/openca-users