Re: OpenPG/X.509 interoperability

2005-11-02 Thread Lionel Elie Mamane
On Mon, Oct 31, 2005 at 12:36:13AM +0100, Christoph Anton Mitterer wrote: > What about the two big "free" X.509" suppliers (CACert and Thawte) > do they sign OpenPGP keys? Thawte used to, but doesn't anymore. CACert does. -- Lionel ___ Gnupg-users ma

Re: OpenPG/X.509 interoperability

2005-11-01 Thread Werner Koch
On Tue, 1 Nov 2005 19:56:25 +0100 (CET), Henning Hucke said: > X.509 as well as OpenPGP are just package aroung the product. You can > use the private and public keys themselfs to package them as OpenPGP or > X.509. So this way you can have one and the same key pair to work in > both worlds. S

Re: OpenPG/X.509 interoperability

2005-11-01 Thread Werner Koch
On Mon, 31 Oct 2005 16:42:48 +0100, Christoph Anton Mitterer said: > What do you mean by "private extension"? OpenPGP defines identifier ranges for private and experimental use. Salam-Shalom, Werner ___ Gnupg-users mailing list Gnupg-users@gnupg

Re: OpenPG/X.509 interoperability

2005-11-01 Thread Henning Hucke
On Mon, 31 Oct 2005, Werner Koch wrote: > On Mon, 31 Oct 2005 00:36:13 +0100, Christoph Anton Mitterer said: > > > This is perhaps a stupid question but how far are these two standards > > interoperable? > > They are not interoperable. Depends on what you rate to be "interoperable" (see below)

Re: OpenPG/X.509 interoperability

2005-10-31 Thread Christoph Anton Mitterer
Werner Koch wrote: Can X.509 certificates be used to sign/certificate OpenPGP UIDs? No. You can add a private extension to do so. What do you mean by "private extension"? Chris. (from now on,.. imply my "best wishes" =) ) begin:vcard fn:Mitterer, Christoph Anton n:Mitterer;Christop

Re: OpenPG/X.509 interoperability

2005-10-31 Thread Werner Koch
On Mon, 31 Oct 2005 00:36:13 +0100, Christoph Anton Mitterer said: > This is perhaps a stupid question but how far are these two standards > interoperable? They are not interoperable. > Can X.509 certificates be used to sign/certificate OpenPGP UIDs? No. You can add a private extension to do

Re: OpenPG/X.509 interoperability

2005-10-30 Thread Christoph Anton Mitterer
Alaric Dailey wrote: CAcert offers a GPG signature if your persona has been verified, and I wrote this as well. http://wiki.cacert.org/wiki/ConvertingCertificateToPgp Uhm,.. but that way I create a NEW key,... correct? I was looking for a signature for my EXISTING key. if this doesn't an