Welcome to the wolfSSL Forums!

2017-07-26 23:39:53

I have generated a x509 certificate using wolfssl. After exporting it into pem format, I could only see the certificate string. I want to convert this certificate string to more human readable format. In openssl, we use bio functions.

For example

Current certificate format.
----------------------------------
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Required Human readable format trying to achieve.
--------------------------------------------------------
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
b7:b6:90:33:66:1b:6b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, ST=Montana, L=Bozeman, O=Sawtooth, OU=Consulting, CN=www.wolfssl.com/emailAddress=info@wolfssl.com
Validity
Not Before: Aug 11 20:07:37 2016 GMT
Not After : May 8 20:07:37 2019 GMT
Subject: C=US, ST=Montana, L=Bozeman, O=Sawtooth, OU=Consulting, CN=www.wolfssl.com/emailAddress=info@wolfssl.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:bf:0c:ca:2d:14:b2:1e:84:42:5b:cd:38:1f:4a:
f2:4d:75:10:f1:b6:35:9f:df:ca:7d:03:98:d3:ac:
de:03:66:ee:2a:f1:d8:b0:7d:6e:07:54:0b:10:98:
21:4d:80:cb:12:20:e7:cc:4f:de:45:7d:c9:72:77:
32:ea:ca:90:bb:69:52:10:03:2f:a8:f3:95:c5:f1:
8b:62:56:1b:ef:67:6f:a4:10:41:95:ad:0a:9b:e3:
a5:c0:b0:d2:70:76:50:30:5b:a8:e8:08:2c:7c:ed:
a7:a2:7a:8d:38:29:1c:ac:c7:ed:f2:7c:95:b0:95:
82:7d:49:5c:38:cd:77:25:ef:bd:80:75:53:94:3c:
3d:ca:63:5b:9f:15:b5:d3:1d:13:2f:19:d1:3c:db:
76:3a:cc:b8:7d:c9:e5:c2:d7:da:40:6f:d8:21:dc:
73:1b:42:2d:53:9c:fe:1a:fc:7d:ab:7a:36:3f:98:
de:84:7c:05:67:ce:6a:14:38:87:a9:f1:8c:b5:68:
cb:68:7f:71:20:2b:f5:a0:63:f5:56:2f:a3:26:d2:
b7:6f:b1:5a:17:d7:38:99:08:fe:93:58:6f:fe:c3:
13:49:08:16:0b:a7:4d:67:00:52:31:67:23:4e:98:
ed:51:45:1d:b9:04:d9:0b:ec:d8:28:b3:4b:bd:ed:
36:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8E:67:11:74:C3:26:1D:3F:ED:33:63:B3:A4:D8:1D:30:E5:E8:D5
X509v3 Authority Key Identifier:
keyid:27:8E:67:11:74:C3:26:1D:3F:ED:33:63:B3:A4:D8:1D:30:E5:E8:D5
DirName:/C=US/ST=Montana/L=Bozeman/O=Sawtooth/OU=Consulting/CN=www.wolfssl.com/emailAddress=info@wolfssl.com
serial:B7:B6:90:33:66:1B:6B:23

X509v3 Basic Constraints:
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
0e:93:48:44:4a:72:96:60:71:25:82:a9:2c:ca:60:5b:f2:88:
3e:cf:11:74:5a:11:4a:dc:d9:d8:f6:58:2c:05:d3:56:d9:e9:
8f:37:ef:8e:3e:3b:ff:22:36:00:ca:d8:e2:96:3f:a7:d1:ed:
1f:de:7a:b0:d7:8f:36:bd:41:55:1e:d4:b9:86:3b:87:25:69:
35:60:48:d6:e4:5a:94:ce:a2:fa:70:38:36:c4:85:b4:4b:23:
fe:71:9e:2f:db:06:c7:b5:9c:21:f0:3e:7c:eb:91:f8:5c:09:
fd:84:43:a4:b3:4e:04:0c:22:31:71:6a:48:c8:ab:bb:e8:ce:
fa:67:15:1a:3a:82:98:43:33:b5:0e:1f:1e:89:f8:37:de:1b:
e6:b5:a0:f4:a2:8b:b7:1c:90:ba:98:6d:94:21:08:80:5d:f3:
bf:66:ad:c9:72:28:7a:6a:48:ee:cf:63:69:31:8c:c5:8e:66:
da:4b:78:65:e8:03:3a:4b:f8:cc:42:54:d3:52:5c:2d:04:ae:
26:87:e1:7e:40:cb:45:41:16:4b:6e:a3:2e:4a:76:bd:29:7f:
1c:53:37:06:ad:e9:5b:6a:d6:b7:4e:94:a2:7c:e8:ac:4e:a6:
50:3e:2b:32:9e:68:42:1b:e4:59:67:61:ea:c7:9a:51:9c:1c:
55:a3:77:76
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

I have seen a BIO function in wolfssl (wolfSSL_PEM_write_bio_X509). How to use this function? Is there any other options?

Thanks,

2017-07-20 08:16:47

Hi,

I am trying to generate user certificates using CA certificate and key in wolfssl. Basically, I am trying to realize the below openssl command.

openssl x509 -req -in example.org.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out example.org.crt

In wolfssl, below steps has been followed.

1. Called wc_MakeCertReq() with user private key key
2. Now I should call wc_SignCert() to with CA key. But this API does not have an option to pass CA certificate.

Am I following the right steps? I have referred wolfcrypt/test.c but not able to find what I am looking for.

Can you provide a example to create the user certificate from CA certificate.

Thanks,

2017-07-17 05:39:06

Hi,

I am trying export a rsa:2048 private key (in pem ) into PKCS#8 format. In openssl, I have used below command to do this.

openssl pkcs8 -topk8 -in server-key.pem -out server-keyPkcs8Enc.pem

After searching in the source code , I could see the below API.

WOLFSSL_API
int wolfSSL_PEM_write_RSAPrivateKey(FILE *fp, WOLFSSL_RSA *rsa,
const EVP_CIPHER *enc,
unsigned char *kstr, int klen,
pem_password_cb *cb, void *u);

But there is not much information about the parameters. Is there any sample using this API? Can you provide some insight to the
parameters used in this API?

Thanks.

2017-07-06 06:41:36

Hi,

After looking at the options , I could not see RSA key generation option.
In genkey file it is mentioned as it is this feature will release soon. Is it possible to get an update.

Regards,
Krishnan.

2017-07-04 06:36:46

Hi Kaleb,

Thank you for the inputs. I am able to compile WolfCLU with using another linux PC (Ubuntu 14.04 LTS). Now I am porting a script that uses openssl utility with wolfssl utility.

My existing key generation script with openssl is as follows. Can you provide me the equivalent commands with wolfssl.

I could not find pkcs8 option in wolfCLU.

openssl req -newkey ${ca_key_type} -passout file:./key_pass.txt \
-subj ${ca_subj_req} \
-x509 -extensions v3_ca \
-keyout temp_ca.pem \
-out ${ca_cert}.pem \
-days ${val_period} -config ../ca/openssl.cnf

# Generate CA key in PKCS #8 format - both PEM and DER
openssl pkcs8 -passin file:./key_pass.txt -passout file:./key_pass.txt \
-topk8 -inform PEM -outform DER -v2 des3 \
-in temp_ca.pem \
-out ${ca_key}.der

openssl pkcs8 -passin file:./key_pass.txt -passout file:./key_pass.txt \
-topk8 -inform PEM -outform PEM -v2 des3 \
-in temp_ca.pem \
-out ${ca_key}.pem

# Convert CA Certificate to DER format
openssl x509 -inform PEM -outform DER -in ${ca_cert}.pem -out ${ca_cert}.der

Thanks,
Krishnan.

2017-06-27 22:27:48

Hi,

I am trying to compile WolfCLU utility on an Ubuntu. Earlier I have compiled WolfSSL with default configure options and installed.

cisadmin@a2md15616l:~/wolfssl_example/wolfssl-examples-master/wolfCLU$ ./configure --enable-pwdbased --enable-opensslextra && make && make check

I see below linking error when I compile WolfCLU.

cisadmin@a2md15616l:~/wolfssl_example/wolfssl-examples-master/wolfCLU$ make
make -j3 all-am
make[1]: Entering directory `/home/wolfssl_example/wolfssl-examples-master/wolfCLU'
CCLD wolfssl
clu_src/tools/clu_hex_to_bin.o: In function `wolfCLU_hexToBin':
clu_hex_to_bin.c:(.text+0x124): undefined reference to `Base16_Decode'
clu_hex_to_bin.c:(.text+0x224): undefined reference to `Base16_Decode'
clu_hex_to_bin.c:(.text+0x340): undefined reference to `Base16_Decode'
clu_hex_to_bin.c:(.text+0x478): undefined reference to `Base16_Decode'
clu_src/crypto/clu_decrypt.o: In function `wolfCLU_decrypt':
clu_decrypt.c:(.text+0x3af): undefined reference to `wc_PBKDF2'
clu_src/x509/clu_parse.o: In function `wolfCLU_parseFile':
clu_parse.c:(.text+0x24d): undefined reference to `wc_DerToPem'
clu_src/genkey/clu_genkey.o: In function `wolfCLU_genKey_PWDBASED':
clu_genkey.c:(.text+0xb9): undefined reference to `wc_PBKDF2'
collect2: error: ld returned 1 exit status
make[1]: *** [wolfssl] Error 1

Does it required to enable some more option in WolfSSL compilation?

Appreciate your help in providing the right steps.

Thanks,

2015-09-04 07:00:53

Does wolfssl also use /dev/urandom

2015-08-06 23:32:52

In the commercial version of wolfssl we see a cyassl folder. Is this folder needed ? we tested wolfssl application by removing the cyassl folder and it worked fine . is there any need to keep the cyassl folder ? Can it be removed ?

2015-06-22 19:04:15

we are using wolfSSL on a QNX 6.6 platform

QNX uses Yarrow Pseudo-random number generator (PRNG)

http://www.qnx.com/developers/docs/660/ … dom%22%20.

what type of random number generator WolfSSL uses and how it is seeded?

Welcome to the wolfSSL Forums!

Search options

Posts found: 9

1 Topic by delphiwolf 2017-07-26 23:39:53

Topic: How to export and x509 certificate in more human readable form (1 replies, posted in wolfSSL)

2 Topic by delphiwolf 2017-07-20 08:16:47

Topic: Creating user certificate using CA certificates and keys (1 replies, posted in wolfSSL)

3 Topic by delphiwolf 2017-07-17 05:39:06

Topic: How to encrypt an RSA 2048 Private key in PKCS#8 format (1 replies, posted in wolfSSL)

4 Reply by delphiwolf 2017-07-06 06:41:36

Re: Linking problem while compiling WolfCLU on Ubuntu 16.04 LTS (4 replies, posted in wolfSSL)

5 Reply by delphiwolf 2017-07-04 06:36:46

Re: Linking problem while compiling WolfCLU on Ubuntu 16.04 LTS (4 replies, posted in wolfSSL)

6 Topic by delphiwolf 2017-06-27 22:27:48

Topic: Linking problem while compiling WolfCLU on Ubuntu 16.04 LTS (4 replies, posted in wolfSSL)

7 Topic by delphiwolf 2015-09-04 07:00:53

Topic: Does wolfssl also use /dev/urandom in QNX ? (1 replies, posted in wolfSSL)

8 Topic by delphiwolf 2015-08-06 23:32:52

Topic: [SOLVED] cyassl folder in commercial version of wolfSSL (1 replies, posted in wolfSSL)

9 Topic by delphiwolf 2015-06-22 19:04:15

Topic: what type of random number generator WolfSSL uses and how it is seeded (1 replies, posted in wolfSSL)

Posts found: 9