New Version of Netscape Certificate don't accept openssl generated requests

2000-08-08 Thread Gao Yuhang
I want to sign a server certificate generated by "open req" cmd. Once I was successful with the older version of Netscape Certificate Server 1.0.1, but now I fail to use Netscape Certificate Management System (CMS)4.0 to do the work. I always get bellow error message after submitting the request:

Re: LDAP integration

2000-08-08 Thread Crispin Wellington
Sorry, but from my experience openLDAP is *really* lame. The software needs some serious optimization. openLDAP on a Linux box will give you roughly 30 authentications per second. Compare this with Netscapes commercial LDAP directory server, which on the same hardware, under Windows 2000 will giv

Re: LDAP integration

2000-08-08 Thread Premson P R
Hi, Hope u guys would be interested in this site. http://www.openldap.org/ - Premson --- "Harry W. Waddell" <[EMAIL PROTECTED]> wrote: > On Tue, 8 Aug 2000, Patrick G. Moore wrote: > > > Hi all, > > > > I am looking for some sample code on how to > > integrate LDAP lookups into openSSL for

RE: Problem with root cert on web page.

2000-08-08 Thread Benny Chandra
Hi Wyatt, You cannot import any certificate to IE using MIME types application/x-x509-ca-cert. I suggest you follow the way of MS Certificate server importing root certificate. It send the certificate as a file to the browser, then user save those file and import it manually. I haven't found any a

Problem with root cert on web page.

2000-08-08 Thread Wyatt, Anthony
Hi, I have a Netscape CA. I can get the root certificate off of it without any problems, but I don't want anyone else in the world to have access to it. So we thought we'd put the cert on our web page for people to collect. It has worked in the past with the following perl script: # Op

Re: serial file format?

2000-08-08 Thread Lam Ah
>From my experience: The number of digits should be even. One leading size should be added if the number of digits is odd. e.g. "301" should change to "0301". Hope this help! -- Lam Ah [EMAIL PROTECTED] - email (512) 682-6901 ext. 1057 - voicemail/fax Markus Wagner <[EMAIL PROTECTED]> wr

Re: LDAP integration

2000-08-08 Thread Harry W. Waddell
On Tue, 8 Aug 2000, Patrick G. Moore wrote: > Hi all, > > I am looking for some sample code on how to > integrate LDAP lookups into openSSL for > retrieving certs and crls when verifying. > The mod-ssl and apache-ssl sites don't mention > it, but I thought apache was LDAP aware. > > Any ideas?

RSA Digital Signatures: RSA_sign verus RSA+SHA1

2000-08-08 Thread Eugene Levy
Is there any advantage in using the openssl function "RSA_sign" for RSA based Digital signatures of a block of raw data, compared to simply doing it manually by generating a SHA1 hash (fingerprint) of that data, and encrypting it with the RSA private key encryption "RSA_private_encrypt"? Both met

Re: Client alert message

2000-08-08 Thread Eric Murray
On Tue, Aug 08, 2000 at 12:51:52PM -0500, [EMAIL PROTECTED] wrote: > Hello there, > > I would like to use OpenSSL to do the following: > > Send an alert message with level of fatal that results in immediate > termination of the connection. > Then also check that the session identifier is invalid

Client alert message

2000-08-08 Thread EXT-Mike . Savard
Hello there, I would like to use OpenSSL to do the following: Send an alert message with level of fatal that results in immediate termination of the connection. Then also check that the session identifier is invalidated, preventing the failed session from being used to establish new connections.