Re: Server requests certificate

1999-08-06 Thread Martin Kuba
Dr Stephen Henson wrote: > You need a copy of the root and intermediate CA certificates. How you > get these depends on the CA. Verisign certificates aren't all available > from their site but Thawtes are. Also several CA certificates are > already included in OpenSSL, so you may not need to do an

Date formats of -startdate and -enddate of x509 cmd

1999-08-06 Thread Dev Kanaginhal
We want to generate Certifcates using x509 cmd of SSLeay by giving the exact Start Date & Time, and End Date & Time. We have been successful in generating Certificates using the -days option, but we want to state the Start and End Times/Dates more precisely. Pl let us know the format of the arg

Date formats of -startdate and -enddate of x509 cmd

1999-08-06 Thread Dev Kanaginhal
We want to generate Certifcates using x509 cmd of SSLeay by giving the exact Start Date & Time, and End Date & Time. We have been successful in generating Certificates using the -days option, but we want to state the Start and End Times/Dates more precisely. Pl let us know the format of the arg

Re: Re: Library available outside the USA ?

1999-08-06 Thread Vincent Levesque
Hello, Is the RSA patent really valid in Canada? I was under the impression that the patent was valid exclusively in the US. At least I think that was the conclusion of the discussions I've found on this mailing list. Maybe Canada was implicitely understood as being part of the "US territory"

Re: Compiling Error

1999-08-06 Thread Oka
Thank you very much. Bruce Williams wrote: > > -BEGIN PGP SIGNED MESSAGE- > > On 06-Aug-99 Oka wrote: > > Hi, can someone help me how to fix this error? > > I'm trying to build OpenSSL-0.9.3a on Solaris 7 x86. > > What I do is: ./config then make. > > But there is en error on the proces

Re: import pkcs12 certificate to netscape

1999-08-06 Thread Dr Stephen Henson
Kevin Fan wrote: > > I can import pkcs12 file into netscape > in netscape browser: Security->Yours->Import and select pkcs12 file, > but I have to download it and then import. > I write a perl cgi to read pkcs12 file and print it out like: > > print "Content-Type: application/x-x509-user-cert\n\

Re: The string contains characters that are illegal for the ASN.1 type

1999-08-06 Thread Dr Stephen Henson
Julio Sánchez Fernández wrote: > > Now a question to developers. Why the call to ASN1_PRINTABLE_type > and the subsequent check if in a world with BMPString, UniversalString > and UTFString (that seems the future according to RFC2459), the > function ASN1_PRINTABLE_type is essentially a broken c

Re: import pkcs12 certificate to netscape

1999-08-06 Thread Erwann ABALEA
On Fri, 6 Aug 1999, Kevin Fan wrote: > I can import pkcs12 file into netscape > in netscape browser: Security->Yours->Import and select pkcs12 file, > but I have to download it and then import. > I write a perl cgi to read pkcs12 file and print it out like: > > print "Content-Type: application/x

Re: client authentication (SSL_CTX_set_verify)

1999-08-06 Thread Bodo Moeller
On Thu, Aug 05, 1999 at 01:28:56PM -0700, Claus Assmann wrote: > Question: is there some simple way to find out whether the client > has been authenticated? I registered a callback with SSL_CTX_set_verify, > but I don't completely understand it... Do you have to use a callback? You can use SSL_

import pkcs12 certificate to netscape

1999-08-06 Thread Kevin Fan
I can import pkcs12 file into netscape in netscape browser: Security->Yours->Import and select pkcs12 file, but I have to download it and then import. I write a perl cgi to read pkcs12 file and print it out like: print "Content-Type: application/x-x509-user-cert\n\n"; print $pkcs12; and want net

Net::SSLeay::sslcat()

1999-08-06 Thread Russ Taylor
Can anyone help a beginner *please*? My ISP supplied me with the the following information; platform = OpenBSD/i386 2.5 perl = 5.005_03 OpenSSL= 0.9.3a C compiler = gcc 2.5 libc = bsd When I ran Sampo's examples/sslcat.pl script via telnet by typing "perl sslcat.pl" at the comm

Re: The string contains characters that are illegal for the ASN.1 type

1999-08-06 Thread Julio Sánchez Fernández
wjun wrote: > The Subjects Distinguished Name is as follows > countryName :PRINTABLE:'CN' > organizationName :ASN.1 30:' > The string contains characters that are illegal for the ASN.1 type Type 30 is a BMP string, that is a string in the Basic Multilingual Plane of ISO 10646, t

Re: Generating Certificates and running the server

1999-08-06 Thread Ben Laurie
Joe Novielli wrote: > > I'm trying to generating a self signed certificate that expires in 3 > days with: > > openssl req -new -x509 -nodes -out httpsd.pem -keyout httpsd.pem -days 3 > > (Note: not sure if I MUST use a openssl.cnf file - I don't use it in the > above statement). > >