RE: Pop, imap cert

2003-12-01 Thread Antonio Querubin
On Mon, 1 Dec 2003, Lee Dilkie wrote: > i use the same certificate but I added all three names, ie. > > CN=pop.xxx.com > CN=smtp.xxx.com > CN=www.xxx.com > > That way, pop3, smtp and https can use the same certificate and the clients > won't complain of a name mismatch. How do add (or create) mul

Re: Pop, imap cert

2003-12-01 Thread Randall Perry
>> the server name shows up as the CN in the server certificate, >> for example. > > i use the same certificate but I added all three names, ie. > > CN=pop.xxx.com > CN=smtp.xxx.com > CN=www.xxx.com > Didn't know you could modify a cert purchased from a CA. Or are you saying when you originall

Re: Pop, imap cert

2003-12-01 Thread Rich Salz
Randall Perry wrote: I've got separate key, cert files for apache. Do I need to embed the key and passphrase in the server to work with ipop3d? The server needs access to the private key that matches the cert. /r$ -- Rich Salz, Chief Security Architect DataPower Technology

Re: Pop, imap cert

2003-12-01 Thread Randall Perry
I've got separate key, cert files for apache. Do I need to embed the key and passphrase in the server to work with ipop3d? > Randall Perry wrote: >> Can a web server cert be used for secure pop, imap servers? > > Probably. The server doesn't care. It's what the clients do when > verifying the

RE: Pop, imap cert

2003-12-01 Thread Lee Dilkie
> the server name shows up as the CN in the server certificate, > for example. i use the same certificate but I added all three names, ie. CN=pop.xxx.com CN=smtp.xxx.com CN=www.xxx.com That way, pop3, smtp and https can use the same certificate and the clients won't complain of a name mismatch.

Re: blob from CAPI

2003-12-01 Thread Dr. Stephen Henson
On Mon, Dec 01, 2003, Mike Gagnon wrote: > > I don't think it's PEM. It's binary (The function is binaryToString)... > Well the output from binaryToString should be PEM. If you want to convert the input then it should be DER. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see hom

Error when running make

2003-12-01 Thread Mike O'Doherty
Folks,   I am attempting to install openssl-0.9.7c on an OpenBSD3.1 server.  I’ve run config with the no-asm flag as suggested in the FAQs.  ./config no-asm gave no error messages.  However, when I run make, I get this error and make exits:  gcc -I.. -I../.. -I../../include -DDSO_DLFCN -

Re: blob from CAPI

2003-12-01 Thread Mike Gagnon
I don't think it's PEM. It's binary (The function is binaryToString)... Mike > On Mon, Dec 01, 2003, Mike Gagnon wrote: > > > Hi Dr. Henson / list, > > > > This is the code that I was using to convert my blob to an OpenSSL certificate > > (the problem I have > > with this working code is that

Re: blob from CAPI

2003-12-01 Thread Dr. Stephen Henson
On Mon, Dec 01, 2003, Mike Gagnon wrote: > Hi Dr. Henson / list, > > This is the code that I was using to convert my blob to an OpenSSL certificate (the > problem I have > with this working code is that CryptBinaryToString is only available on XP): > > --

Re: Pop, imap cert

2003-12-01 Thread Rich Salz
Randall Perry wrote: Can a web server cert be used for secure pop, imap servers? Probably. The server doesn't care. It's what the clients do when verifying the server's identity that matters. It will probably help if the server name shows up as the CN in the server certificate, for example. /

Re: blob from CAPI

2003-12-01 Thread Mike Gagnon
Hi Dr. Henson / list, This is the code that I was using to convert my blob to an OpenSSL certificate (the problem I have with this working code is that CryptBinaryToString is only available on XP): - CryptGetUserKey(

Pop, imap cert

2003-12-01 Thread Randall Perry
Can a web server cert be used for secure pop, imap servers? -- Randall Perry sysTame Xserve Web Hosting/Co-location Website Development/Promotion Mac Consulting/Sales http://www.systame.com/ __ OpenSSL Project

Re: blob from CAPI

2003-12-01 Thread Dr. Stephen Henson
On Mon, Dec 01, 2003, Mike Gagnon wrote: > Hi list, > > Would anyone know how to convert a CAPI certificate blob to an OpenSSL X509 > certificate? > > Thanks very much! > Mike Gagnon > > Depends on what you mean by a "CAPI certificate blob". It might already by a DER format certificate or co

blob from CAPI

2003-12-01 Thread Mike Gagnon
Hi list, Would anyone know how to convert a CAPI certificate blob to an OpenSSL X509 certificate? Thanks very much! Mike Gagnon __ OpenSSL Project http://www.openssl.org User Support Mailing Li

Re: importing a raw RSA public key

2003-12-01 Thread Dr. Stephen Henson
On Mon, Dec 01, 2003, Ñëåïíåâ Âëàäèìèð wrote: > Hello, > > suppose I have a binary (or base64-encoded) representation of an RSA > public key modulus - just a raw string of 1024 bytes. And I know that > the corresponding public key exponent is 65537. Now, how do I convert > this information to

importing a raw RSA public key

2003-12-01 Thread Слепнев Владимир
Hello, suppose I have a binary (or base64-encoded) representation of an RSA public key modulus - just a raw string of 1024 bytes. And I know that the corresponding public key exponent is 65537. Now, how do I convert this information to a .der or .pem public key file, recognizable by OpenSSL?

Re: compiler warnings from asn1.h

2003-12-01 Thread Matt Davey
> Well a couple of files have an ASN1_METHOD in them but nothing actually > made use of those. > > You could just #if 0 out that structure then #if 0 the small number > of functions and references that use it. > > Steve. I took your advice, and blindly #if 0'd out several offending sections in

re[2]: Win CE 3.0 with OpenSSL

2003-12-01 Thread Jeff Roberts
Have you looked at the .NET language ? SSL may be build into the Socket Class, if it is not, then it will be in the next release for sure ! It is documented as being in there now. __ OpenSSL Project

Re: once more: what is the exact meaning of this error message?

2003-12-01 Thread Gerd Schering
Richard Levitte - VMS Whacker wrote: In message <[EMAIL PROTECTED]> on Fri, 28 Nov 2003 11:02:56 +0100, Gerd Schering <[EMAIL PROTECTED]> said: Schering> when I try to update the database via Schering> Schering> openssl ca -config $Config -updatedb Schering> Schering> I get the following error:

Re: Get IP from the peer

2003-12-01 Thread Fernando Moya
Ok, Thanks a lot, Stephen - Original Message - From: "Dr. Stephen Henson" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, November 28, 2003 1:01 PM Subject: Re: Get IP from the peer > On Fri, Nov 28, 2003, Fernando Moya wrote: > > > Hi, > > > > I have implemented a client/se