my ignorance, on parade

1999-03-03 Thread Colin McCormack
Is there any way to revoke a certificate which has not expired using openSSL apps? Could somebody please detail it to me? Thanks, Colin. __ OpenSSL Project http://www.openssl.org User Support M

Re: MSIE/Mac: cert request generation and cert installation

1999-03-03 Thread Lars Eggert
-BEGIN PGP SIGNED MESSAGE- erwann> Of course it's different the xenroll.dll and certenr3.dll are erwann> Windows only libraries You have to get a diffreent library for erwann> your Macintosh, and try to do the job with this new one... Any pointers on where to get this Mac l

Re: MSIE/Mac: cert request generation and cert installation

1999-03-03 Thread Erwann ABALEA
On Wed, 3 Mar 1999, Lars Eggert wrote: > I've been able to cook up a piece of Javascript to generate cert > requests and install the signed certs using MSIE for Windows. The > same code fails with a message of "object doesn't support this > property or method" when running MSIE for the Macinto

CA certs

1999-03-03 Thread Bob Lockie
I switched from a local CA to Verisign and I get the following error in my SSLeay client: error 20 at depth 0: unable to get local issuer certificate name=/C=CA/ST=Ontario/L=Ottawa/O=NortelNetworks/OU=Information Systems/CN=zcarh02u.ca.nortel.com I have tried many of certificates that come wi

MSIE/Mac: cert request generation and cert installation

1999-03-03 Thread Lars Eggert
Hi, I've been able to cook up a piece of Javascript to generate cert requests and install the signed certs using MSIE for Windows. The same code fails with a message of "object doesn't support this property or method" when running MSIE for the Macintosh. The point of failure is when I first c

MSIE and certificate requests

1999-03-03 Thread Kaur Virunurm
Massimiliano Liccardo wrote: > I'll try to find a working example of a MSIE 4.0 certificate > request html page.. Can you point me some links ??? Look at major CA's request pages. I will also send you an example form in private. What is important: You must use the newer xenroll.dll, not cer

Re: DER encoding:

1999-03-03 Thread Massimiliano Liccardo
GOMEZ Henri wrote: > I'm trying to generate a certificate for IE 4. > > Hi Gomez, I'll try to find a working example of a MSIE 4.0 certificate request html page.. Can you point me some links ??? -- o___ /\_ _| | Max Liccardo - Security Pianist Consultant _\

MSIE import worked !!!

1999-03-03 Thread GOMEZ Henri
I fixed my import problem with .p12 cert files. My french version of MSIE 4.0 (4.72.2106.8) didn't accept private key with more than 512 bits. (Thanks to Kaur Virunurm [[EMAIL PROTECTED]]) I modify my script to use only 512 bits and all work fine. Question: What about security of these certs ?

Re: DER encoding:

1999-03-03 Thread Erwann ABALEA
On Wed, 3 Mar 1999, GOMEZ Henri wrote: > I'm trying to generate a certificate for IE 4. > > The .p12 generated by the following script is successfully imported in > NS. > > But the DER encoded cert generated from .pem' one via > $ssleay x509 -in $sslcrtdir/$user.crt -outform DER -out > $sslcrt

DER encoding:

1999-03-03 Thread GOMEZ Henri
I'm trying to generate a certificate for IE 4. The .p12 generated by the following script is successfully imported in NS. But the DER encoded cert generated from .pem' one via $ssleay x509 -in $sslcrtdir/$user.crt -outform DER -out $sslcrtdir/$user.der Any Idea... PS: I run my own self signed

Re: Shared Libraries again

1999-03-03 Thread Christoph Martin
Brad Asztalos writes: > Christoph can you repost the patches you sent to > open-ssl to build shared libraries under unix? > I did it for debian-i386. Also I had to change the handling of -o option in libtool: 406,408c407,411 < $echo "$modename: you cannot specify the output filename wi

Re: Non-blocking probleam related with select system call

1999-03-03 Thread Georg Gollmann
At 11:25 Uhr +0900 03.03.1999, Lee Min Seop wrote: >Hi. >I am using the SSLeay for our browser. >When I did interoperability test between SSL web servers and our browser, >I had a problem related with non-blocking IO. >The browser and server opened a persistent connection. >The browser called SSL_

openSSL Configuration file correspondances

1999-03-03 Thread Colin McCormack
I'm toying with the idea of writing a more user-friendly CA management tool. In the process of analysing what's already there, I have had to deal with the cryptic interface between ca and req and the configuration file (variously ssleay.cnf) This file is only ever used by ca and req programs,