PKCS#10?

2002-11-06 Thread Oblio
How do I sign a certificate created in PKCS#10? Thanks, Oblio __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager

How do I remove my email address from the questions list?

2002-11-06 Thread James Powers
How do I remove my email address from the questions list? * This email and all attachments that may have been included are intended only for the use of the party to whom/which the email is addressed and may contain information that is privileged, confident

Re: Help for openssl verify command and its strange error message

2002-11-06 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 06 Nov 2002 23:58:06 +0900 (JST), Kiyoshi WATANABE <[EMAIL PROTECTED]> said: kiyoshi> Does this mean that openssl verify command does not check the name kiyoshi> chain and if I put the correct value in the issuer of x in kiyoshi> apps/verify.c, I would not g

Re: Can we use "/" and "=" in CN and DN ?

2002-11-06 Thread Bear Giles
CALinux wrote: Hi thanks for help, our problem is that in Italian Public Adminitsration is mandatory the object Description in Certificates. It must be like this: Description="C=/N=/D=[/R=] Example Description=C=Werzowa/N=Karl-Michael/D=01-01-1980 I believe what's happening is that the

Re: Help for openssl verify command and its strange error message

2002-11-06 Thread Kiyoshi WATANABE
> levitte> Since -issuer_checks sets the X509_V_FLAG_CB_ISSUER_CHECK flag and > levitte> 'issuer' isn't the issuer of 'x' during those three calls, you can see > levitte> how come the callback gets called those three times. The callback in > levitte> question is the onw in apps/verify.c, which wr

Re: Help for openssl verify command and its strange error message

2002-11-06 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 06 Nov 2002 15:12:28 +0100 (CET), Richard Levitte - VMS Whacker <[EMAIL PROTECTED]> said: levitte> In message <[EMAIL PROTECTED]> on Wed, 06 Nov 2002 21:23:24 +0900 (JST), Kiyoshi WATANABE <[EMAIL PROTECTED]> said: levitte> levitte> kiyoshi> >openssl verif

Re: Help for openssl verify command and its strange error message

2002-11-06 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 06 Nov 2002 21:23:24 +0900 (JST), Kiyoshi WATANABE <[EMAIL PROTECTED]> said: kiyoshi> >openssl verify -issuer_checks -CAfile cacert.pem 01.pem kiyoshi> kiyoshi> I encounter the following message: kiyoshi> kiyoshi> 01.pem: /C=JP/O=TEST/OU=TESTORG/CN=EE01 ki

Re: OpenSSL on WIN2K

2002-11-06 Thread Jeffrey Altman
As documented on our web site http://www.kermit-project.org/k95.html#export Kermit 95 has been approved for export including an unrestricted version of OpenSSL integrated with a full implementation of MIT's Kerberos for Windows. Export Permission Export of cryptographic software is restr

Re: Can we use "/" and "=" in CN and DN ?

2002-11-06 Thread Karl-Michael Werzowa
The syntax-element /String= is used for concatenating fields, as you would see in [EMAIL PROTECTED] or DirName:/C=AT/ST=Wien/L=., when you use "openssl x509 -in myCert.pem -noout -text" The problem for you could be, that C stands for _C_ountry and will be used in another place in the certific

Help for openssl verify command and its strange error message

2002-11-06 Thread Kiyoshi WATANABE
Dear all, I generated a CA self-signed certificate and an EE certificate and try to verify the cert name chain using the openssl-0.9.7-beta3. >openssl verify -issuer_checks -CAfile cacert.pem 01.pem I encounter the following message: 01.pem: /C=JP/O=TEST/OU=TESTORG/CN=EE01 error 29 at 0 depth

RE: OpenSSL for iPAQ

2002-11-06 Thread Steven Reddie
There was a post last night with the subject "Windows CE Patch for OpenSSL 0.9.6g".  I've been working on a patch myself, and the iPaq is the device I've been working with.  I should be able to contribute it within the next day or so.   Regards,   Steven -Original Message-From:

Re: Can we use "/" and "=" in CN and DN ?

2002-11-06 Thread CALinux
>One more thing: >As I understand it, you could use additional optional fields to be defined >in openssl.cnf: >G and S for _G_iven Name and _S_urname. > >In my opinion it is a good idea to create the CN automatically as a ³>serial-number² for >uniqueness of client certs and handle the user inform

OpenSSL for iPAQ

2002-11-06 Thread Manuel Gil Pérez
Hi all, Actually I develop applications for Compaq iPAQ. Does implementation exist of openSSL for ipaq? Regards.   Manuel Gil Pérez - Proyecto MIMICS II   Facultad de Informática   Universidad de Murcia (Spain) Tfo: +34 968364640

Re: Can we use "/" and "=" in CN and DN ?

2002-11-06 Thread Karl-Michael Werzowa
Title: Re: Can we use "/" and "=" in CN and DN ? One more thing: As I understand it, you could use additional optional fields to be defined in openssl.cnf: G and S for _G_iven Name and _S_urname. In my opinion it is a good idea to create the CN automatically as a “serial-number” for uniqueness

Re: Can we use "/" and "=" in CN and DN ?

2002-11-06 Thread Karl-Michael Werzowa
Title: Re: Can we use "/" and "=" in CN and DN ? my experiences/researches: openssl seems to restrict some of the fields, it does not allow underscores ( _ ), for instance. As I understand it, the standard would allow “directory string”, which is a choice from minimum PrintableString (a-z,A-Z,

Can we use "/" and "=" in CN and DN ?

2002-11-06 Thread CALinux
Hi everyone,   we are using OpenCA and OpenSSL. We want to create a certificate with special CN and DN  such as   CN=//   DN="C=""/N=""D="   but OpenSSL don't accept this character, in fact when we put =/ it believe that is a second field with different value.   There is same special escape c

Re: [Crypt::SSLeay] compile problems on HP-UX 11.11

2002-11-06 Thread Lutz Jaenicke
On Tue, Nov 05, 2002 at 04:04:11PM +0100, Hiemisch Joerg wrote: > Hi All, > I have some trouble to compile SSLeay on HP-UX 11.11 > > I installed a new system with latest recommended patches ( including perl > 5.6.1 ). > > # perl -v > > This is perl, v5.6.1 built for PA-RISC1.1-thread-multi > (wi