Skip to content

Commit

Permalink
update usage
Browse files Browse the repository at this point in the history
  • Loading branch information
@freddy36
freddy36 committed Dec 16, 2014
1 parent 05fbed9 commit 1da0204
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion README.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -22,4 +22,4 @@ pemtrans is essentially exactly what we need but the result doesn't work yet wit
* Remove APC header from server certificate
* `dd if=server-apc.p15 of=server.p15 bs=228 skip=1`
* Add APC header to a standard p15 file containing a 1024 bit key
* `apcheader server-apc.p15 test.p15 1`
* `apcheader server.p15 server-apc.p15 1`

6 comments on commit 1da0204

@jose-pr
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@freddy36 Looking for a way to send a pm or create an issue but couldn't find any as this is a Fork and PM are not available in Github. Building this in Windows everything looks good apart from having to use an older openssl. But have a question regarding pemtrans for apc , the pemtrans cmd asks for a label and secret, what values do i need to use to be able to use it with apc devices.
Steps to create a p15 for a apc device would be?
pemtrans server.key server.crt server.p15 label? secret?
apcheader server.p15 server-apc.p15 1

Also makefile makes reference to a p15dump but i dont see this in the repo.

@jose-pr
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

By any chance do you know where to obtain cryptlib 3.1.1 / do you have a copy?

@freddy36
Copy link
Owner Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

dumped some old cryptlib releases here: https://github.com/freddy36/apc_tools/releases
If I remember correctly I've used cl341 during my tests.

@freddy36
Copy link
Owner Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

for label/secret see the README.md

@freddy36
Copy link
Owner Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

5345811 adds the p15dump file (unfinished work).

@freddy36
Copy link
Owner Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If you've success using the 3.3.1 version please let us know.
My goal was to make the APC PDUs deliver two certificates (intermediate CA+PDU server certificate) and support 2048 bit keys on the first generation devices. But I wasn't successful. Not sure why I never tried it with the same cryptlib version running on the PDUs.

Please sign in to comment.