Welcome to the wolfSSL Forums!

2014-03-04 00:29:21

Hi Chris,

Here is the key in pem format:

-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----

Do you want the der format keyfile?

2014-02-21 07:43:42

Hi Chris,

Thanks a lot for the answer, it works perfectly.
I got another problem when loading my DER filetype private key.
I try to read the file with openssl using "openssl pkcs8" command and it works without problem but when I try to load the private key in wolfSSL embedded SSL I got a parsing error (-143).
I don't understand why it fail...
Here is the code:

idx = 0;
    byte privateKeyBuffer[1024];
    file = fopen("aipk.der", "rb");
    if (!file)
        cout << "ERROR reading private key..." << endl;
    int szPrivateKey = fread(privateKeyBuffer, 1, sizeof(privateKeyBuffer), file);
    cout << szPrivateKey << endl;
    fclose(file);
    ret = RsaPrivateKeyDecode(privateKeyBuffer, &idx, &rsaPrivateKey, szPrivateKey);
    if (ret != 0)
        cout << "ERROR priv key decode: " << ret <<endl;

The key is generate by java's bouncy castle library.

Thanks in advance,

Eric

2014-02-21 02:57:16

Hi Chris,

Thanks for the response.
I check that and everything is ok. But I still got the problem... I think that I miss something but I don't know what...

Here are more informations about the certificates:
CA certificate (Self-Signed):

Certificate that I want to verify:

And the CRL (PEM filetype):

I just test crl under windows and it don't work too, so the problem seems to come from the crl certificate generation... I'll try to find the problem.

Thanks,

Eric

EDIT: I solve the problem, I made some mistakes when generating CRL. Now everything works fine

2014-02-18 06:51:20

Hi everyone,

Here is my problem, I use the wolfSSL embedded SSL certificate manager API to verify some certificate. It works perfectly when CRL option is disable.
Once I turn it on it fails...
I load CRL (DER format) without any error code but then, when I try to verify a certificate, I got an -262 error code (which says "CRL Not Loaded")... I don't understand where is the problem...

Here is my code:

        certManager = CyaSSL_CertManagerNew();
    if (certManager == NULL) {
        cout << "Failure cm new!" << endl;
    } else cout << "Success cm new!" << endl;
    
    ret = CyaSSL_CertManagerLoadCA(certManager, "CACert.pem", 0);
    if (ret != SSL_SUCCESS) {
        cout << "Failure Loading CA certificate!" << endl;
    } else cout << "Success Loading CA certificate!" << endl;
    
    ret = CyaSSL_CertManagerEnableCRL(certManager, 0);
    if (ret != SSL_SUCCESS) {
        cout << "Failure Enable CRL!" << endl << endl;
    } else cout << "Success Enable CRL!" << endl << endl;
    
    ret = CyaSSL_CertManagerLoadCRL(certManager, "CRL/", SSL_FILETYPE_ASN1, 0);
    if (ret != SSL_SUCCESS) {
        cout << "Failure Loading CRL!" << endl << endl;
    } else cout << "Success Loading CRL!" << endl << endl;
    
    cout << "Validation of a certificate...." << endl;
    ret = CyaSSL_CertManagerVerify(certManager,  "certificate.der", SSL_FILETYPE_ASN1);
    cout << ret << endl; //Here I get -262 error code - MISSING_CRL
    if (ret != SSL_SUCCESS) {
        cout << "Failure verify certificate!" << endl << endl;
    } else cout << "Success verify certificate!" << endl << endl;

Any idea?

Thanks in advance,

Eric

2014-02-18 06:41:48

Hi everyone,

I'm currently developed an application using wolfssl library and got some problem.

I want to encrypt some data with RSA. For this purpose I will use rsa function from ctaocrypt library.
My problem is how to get the public key from the certificate which is stored on the hard disk?
I try the following solution:

byte publicKeyBuffer[1024];
WOLFSSL_X509* x509cert = wolfSSL_X509_load_certificate_file("certAI.der", SSL_FILETYPE_ASN1);
publicKeyBuffer = wolfSSL_X509_get_pubkey(x509cert);

But wolfSSL_X509_get_pubkey(x509cert) return a WOLFSSL_EVP_PKEY* type which is not compatible with RsaPrivateKeyDecode function.

Any idea for a solution?

I have also some other problem but I will create new posts.

Thanks in advance,

Eric

Welcome to the wolfSSL Forums!

Search options

Posts found: 5

1 Reply by Eric_2014 2014-03-04 00:29:21

Re: Getting public key from certificate with wolfSSL embedded SSL (4 replies, posted in wolfSSL)

2 Reply by Eric_2014 2014-02-21 07:43:42

Re: Getting public key from certificate with wolfSSL embedded SSL (4 replies, posted in wolfSSL)

3 Reply by Eric_2014 2014-02-21 02:57:16

Re: [SOLVED]Unable to verify certificate w/ certificate manager and CRLs (2 replies, posted in wolfSSL)

4 Topic by Eric_2014 2014-02-18 06:51:20

Topic: [SOLVED]Unable to verify certificate w/ certificate manager and CRLs (2 replies, posted in wolfSSL)

5 Topic by Eric_2014 2014-02-18 06:41:48

Topic: Getting public key from certificate with wolfSSL embedded SSL (4 replies, posted in wolfSSL)

Posts found: 5