Re: Using client authentication

1999-03-04 Thread Erwann ABALEA
On Thu, 4 Mar 1999, Wade L. Scholine wrote: > I am trying to use s_server -Verify to learn some stuff about client > authentication. I'm using Netscape 4.5 as a client, and I have a couple of > free certs from Entrust and Verisign. When I try to connect to s_server I > get an error message from N

RE: MSIE and certificate requests

1999-03-04 Thread Christian Buysschaert
> > I'll try to find a working example of a MSIE 4.0 certificate > > request html page.. Can you point me some links ??? > > Look at major CA's request pages. I will also send you an example form in > private. At the Microsoft site (in the package of the xenroll control) you can find an ASP

Using client authentication

1999-03-04 Thread Wade L. Scholine
This is sort of about 2/3 off-topic, but I am going to ask about it anyway. I am trying to use s_server -Verify to learn some stuff about client authentication. I'm using Netscape 4.5 as a client, and I have a couple of free certs from Entrust and Verisign. When I try to connect to s_server I get

Re: [openssl-users] Telnet supporting SSL

1999-03-04 Thread Harold Molina-Bulla
Paco Orozco wrote: > Hi again, > > I forgot to include compile errors. Here you are: > > Begin of Cut > make[1]: Entering directory > `/usr/local/soft/SSLeay/SSL-MZtelnet-0.11.2/lib/libb > sd' > gcc -c -g -O -I../../include -DHAVE_CONFIG_H -DLIBC_SCCS getenv.c > gcc -c -g -O -I../../inc

Re: my ignorance, on parade

1999-03-04 Thread Douglas E. Engert
> Colin McCormack schrieb: > > > > Is there any way to revoke a certificate which has not expired using openSSL > > apps? > > > > Could somebody please detail it to me? > > Try this revoke script, it takes the serial number #!/bin/sh # #revoke the $1 cert # cp -p demoCA/index.txt demoCA/ind

Re: CA certs

1999-03-04 Thread schuetz
I just ran into a similar situation recently. In verifying up the certificate chain, openssl looks for the issuer to have a specific name, which is .0 where is the hash value of the ASN1 encoding of the distinguished name of the issuer of your certificate. To find out the hash v

Re: [openssl-users] Telnet supporting SSL

1999-03-04 Thread Paco Orozco
Hi again, I forgot to include compile errors. Here you are: Begin of Cut make[1]: Entering directory `/usr/local/soft/SSLeay/SSL-MZtelnet-0.11.2/lib/libb sd' gcc -c -g -O -I../../include -DHAVE_CONFIG_H -DLIBC_SCCS getenv.c gcc -c -g -O -I../../include -DHAVE_CONFIG_H -DLIBC_SCCS herr

Re: [openssl-users] Telnet supporting SSL

1999-03-04 Thread Christoph Martin
Paco Orozco <[EMAIL PROTECTED]> writes: > > After a long time trying to compile SSLeay i've found OpenSSL, i've > installed without problems, but now i can't install a telnet > supporting SLL (like SSL-MZ or STelnet). > > Can anyone help me? What telnet should i install? > > OS/Platform: Lin

Re: my ignorance, on parade

1999-03-04 Thread Holger Reif
You must edit intedx.txt by hand. 1.) Change the leading 'V' into 'R' (revoked) 2.) Insert a revocation date as the 3rd entry (entries are separated by tabs) into the row. Colin McCormack schrieb: > > Is there any way to revoke a certificate which has not expired using openSSL > apps? > > C

[openssl-users] Telnet supporting SSL

1999-03-04 Thread Paco Orozco
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hiya, After a long time trying to compile SSLeay i've found OpenSSL, i've installed without problems, but now i can't install a telnet supporting SLL (like SSL-MZ or STelnet). Can anyone help me? What telnet should i install? OS/Platform: Linux v