Re: New openssl/apps/spkac

1999-09-03 Thread Michael Ströder
Jan Meijer wrote: > > but I'd like to know (if it is possible) the > fingerprint before certifying. > It all has to do with the verification > process we want to do before certifying a key. > > The process can be described as follows: > [..] > During 4 the verification of the identity is done fa

Re: New openssl/apps/spkac

1999-09-03 Thread Dr Stephen Henson
Jan Meijer wrote: > > > Well, in PGP the fingerprint is defined somewhat like a hashvalue over the > public key data, the emailaddress and the date (i think). > > When you issue a netscape client certificate the certificate also contains a > fingerprint. I do not exactly know what this fingerp

Re: New openssl/apps/spkac

1999-09-03 Thread Geoff Thorpe
Hi, > Yep. > > > I am not sure I understood it (partially because I never took a close look > > to PGP ... blame me (!!!)): can you make some real example ? Cout that be > > the public key itself contained in the SPKAC ? > > Well, in PGP the fingerprint is defined somewhat like a hashvalue ov

Re: New openssl/apps/spkac

1999-09-03 Thread Jan Meijer
> It's in the OpenSSL development version. See > http://www.openssl.org/source/> for ways to access > the current source code. Thank you! Stupid me, just did not look very good :( Test it on monday :) Jan -- alive=true __ O

Has anyone tried to use OpenSSL to connect to PBS in Denmark?

1999-09-03 Thread Erik Röser
Somehow something is missing in my implementation of their PSIP (SSL) implementation. I can now connect and read their certificate etc., but I get absolutely no data back as a response when I send them a package. Am I missing something? I started out with the minimal client app found in demos\ssl\

Re: New openssl/apps/spkac

1999-09-03 Thread Bodo Moeller
On Fri, Sep 03, 1999 at 03:48:40PM +0200, Jan Meijer wrote: > [...] where are these modifications available? It's in the OpenSSL development version. See http://www.openssl.org/source/> for ways to access the current source code. _

Making user certs in batch mode?

1999-09-03 Thread Tom Jordan
Hi all, I have to generate a large number of user certificates from data supplied by a database feed. Getting the data out and into a custom format isn't a problem, I just need to be able to run this in batch mode. Does anyone know of good tools, strategies or techniques I could use to generat

Re: New openssl/apps/spkac

1999-09-03 Thread Jan Meijer
Hi Massimiliano, > You are asking wich type of algorithm the user is about to use (DSA/RSA/ > whatever) ? Yep. > I am not sure I understood it (partially because I never took a close look > to PGP ... blame me (!!!)): can you make some real example ? Cout that be > the public key itself conta

Re: New openssl/apps/spkac

1999-09-03 Thread Jan Meijer
Dear Steve, > I've also added a brand new 'spkac' program that prints out the whole > SPKAC structure and allows one to be created from a private key. Its > based on your original idea but rewritten from scratch. > > Since its all very new I'd appreciate any comments. There may well be > the odd

RE: SSL fallback...

1999-09-03 Thread Rene Eberhard
> | > Does anyone know of a program like sslwrap or stunnel > that can fallback to > | > a non-ssl connection if the SSL handshake fails? > | > > | > example.. > | > > | > connect to mail port 25, client supports ssl, connection is sll > | > other client connects to port 25, dosen;t support S

Re: Getting pop-up window everytime from netscape.

1999-09-03 Thread Holger Reif
Most often if a site request authentication it has clear ideas who should have issue dthat cert. So don't expect to get you home grown accepted ;-) Gettign your own ones working is another trick. Perhaps have a look at the documents around the pkcs12 utility and www.drh-consultancy.demon.co.uk

No Subject

1999-09-03 Thread alasdair . i . macleod
Can someone tell me what exactly a userSMIMECertificate is? OID 2.16.840.1.113730.3.1.40 I think it is a PKCS#7 with contentType of 'signedData' and a SignedData blob with only the 'certificates' and 'signerInfos' fields holding information. Any thoughts? Ideally - anyone got a nice script/bit

Generating userSMIMECertificates

1999-09-03 Thread alasdair . i . macleod
Thought I better put in a subject field > -Original Message- > From: MacLeod,AI,Alasdair,NZA4 R > Sent: Friday, September 03, 1999 10:25 AM > To: [EMAIL PROTECTED] > Subject: > > Can someone tell me what exactly a userSMIMECertificate is? > > OID 2.16.840.1.113730.3.1.40 >

Re: SSL fallback...

1999-09-03 Thread Michal Trojnara
Will, > >In the current version of stunnel this behavior is 'by design' against > >RFC. Stunnel is made to enforce encryption. > >Well... It think it could be changed. What do you think? > Why would you want to? To meet RFC requirements? > The whole purpose of setting up an encrypted link >

Re: SSL fallback...

1999-09-03 Thread Michael Salmon
+- On Thu, 02 Sep 1999 23:38:01 +0800, Ng Pheng Siong writes: | On Wed, Sep 01, 1999 at 01:45:00PM -0700, Wil Boucher wrote: | > Does anyone know of a program like sslwrap or stunnel that can fallback to | > a non-ssl connection if the SSL handshake fails? | > | > example.. | > | > connect