openssl req

1999-06-05 Thread Michael Stroeder
HI! IMHO it would be very handy... 1. if one could use the command openssl req -name [CA section] to specify the CA definition for which the certificate request is generated. 2. to have a parameter named "req" (similar to "policy") in a CA section to specify a section with the request templ

ca -inform -outform

1999-06-05 Thread Michael Stroeder
HI! I would like using only DER certificates throughout the whole certification process. Unfortunately the "openssl ca"-command does not support anything like -inform or -outform parameters like all other commands do. Are there plans to change this? I prefer storing certificates in DER format b

Parameter "new_reqs_dir" for openssl.cnf

1999-06-05 Thread Michael Stroeder
HI! I would like to propose a new parameter for the openssl.cnf. In each CA section there should be a parameter "new_reqs_dir" which specifies the directory in which new certificate requests are stored. This could be the default directory for "openssl req" and "openssl ca -[infiles|spkac]". (Wel

OpenSSL CA patches (addendum)

1999-06-05 Thread Massimiliano Pala
Hi! I've been workin' on theese patches for some time and since them have not been included in the 0.9.3 I post them in order to make them available. The patches are 2, and add: * openssl ca - extensions [ exts_section ]: adds the ability to use extensions specified in a

Re: problem verifying self-signed certificates ...

1999-06-05 Thread Ryan P Skadberg
Well, I can answer my own question here. This occurs when you put the exact same information in your certificate as you have in your CA. Skadz Ryan P Skadberg writes: > Hopefully someone has an answer to this. I saw the question once in > the archives, but no answers :( > > I have compil