Re: Newbie question - Signing CSR's

Charles B Cranston wrote: So if you put the two ASCII characters 1A into a file called cacert.srl you would expect the certificate that is produced to have serial number 25 and the file to contain 1B after all the smoke has cleared. I'm sorry, that example should have been (of course) that if you

Re: Newbie question - Signing CSR's

Sigh. But if you READ THE MAN PAGE FOR X509 YOU WOULD SEE THAT IF THERE IS NO -CASERIAL FILE SPECIFIED IT LOOKS IN A FILE WITH THE SAME NAME AS THE SIGNING CERT BUT WITH A SRL SUFFIX. So if you put the two ASCII characters 1A into a file called cacert.srl you would expect the certificate that is p

Question about "Set up your own Certification Authority usingfree software" text

I've read the Martin Ouwehand's "Set up your own Certification Authority using free software" text, http://slwww.epfl.ch/SIC/SL/CA/ and is very interesting and useful. For newbies like me, is available a complete howto like this but more updated? (with the new apache and openssl releases etc etc

Re: Question about OpenSSL test server

Hello: The key derivation and encryption for TLS is done in ssl/t1_enc.c there's actually some debugging code in there already so if you #define TLS_DEBUG it should print out all the keys for you. Thanks very much i will try to do a build using this define :) Best regards Carlos Guzman Alvarez

PKCS#7 and timestamp server

Hi, first of all, I must say I'm not an expert about e-security My problem is: We must store very big documents for about 10 years and our customer asked us to apply a timestamp over every document. I've searched over the internet, and it seems that the timestamp on a non-signe

Re: another New Bie question...

On Thu, Aug 21, 2003, Aditya wrote: > how do i create an intermediare certificate > > i have to create the following certs in this manner > > > Master ROOT CA > Intrermediate CA > Departmental CA > End User Cert > > > how

Re: cert extract / unable to load PKCS7 object

On Thu, Aug 21, 2003, Pierre-Philipp Braun wrote: > Quoting Dr. Stephen Henson (Aug 21, 2003 02:06 +0200), > > > On Thu, Aug 21, 2003, Pierre-Philipp Braun wrote: > > > > > Hi all, > > > i'm trying to make a certificate for use with S/MIME into Pine. > > > But when i type, > > > > > > /usr/pkg/bi

Re: CRL text output on OS390 gives: Bad time value

Gerrit v d Hul wrote: Hi list, I've build OpenSSL version 0.9.7b on OS390 (zOS) with 'Configure OS390-Unix' I want to check/read a CRL, but this gives a problem: the time values are not given. The command 'openssl crl -noout -text -in 5a5d2711.r0' gives: Certificate Revocation List (CRL):

Re: cert extract / unable to load PKCS7 object

Quoting Dr. Stephen Henson (Aug 21, 2003 02:06 +0200), > On Thu, Aug 21, 2003, Pierre-Philipp Braun wrote: > > > Hi all, > > i'm trying to make a certificate for use with S/MIME into Pine. > > But when i type, > > > > /usr/pkg/bin/openssl pkcs7 -in pk7 -print_certs -out cert > > > > i get, > > > >

CRL text output on OS390 gives: Bad time value

Hi list, I've build OpenSSL version 0.9.7b on OS390 (zOS) with 'Configure OS390-Unix' I want to check/read a CRL, but this gives a problem: the time values are not given. The command 'openssl crl -noout -text -in 5a5d2711.r0' gives: Certificate Revocation List (CRL): Version 2 (0x1)