slackware 10 box and signing requests

2004-08-29 Thread mailinglists
Hi I'm getting this on Slackware 10 and a self compiled kernel 2.6.8 when I try to self-sign a cert request: [EMAIL PROTECTED]:/etc/postfix/ssl# openssl ca -in mxReq.pem -days 730 -out mxCert.pem -notext -config openssl.cnf Using configuration from openssl.cnf 23638:error:0E06D06C:configuration f

Re: How to include multiple common names in a single SSL certificate?

2004-08-29 Thread Olaf Gellert
Ralph wrote: > Charles B Cranston wrote: > >> > I'm trying to set up an Apache 2 based web server for multiple >> > name based virtual hosts. As it is not possible with mod_ssl to >> > have a seperate SSL certificate file for each virtual host... >> >> Actually, you can, but they have to have sepa

Re: How to include multiple common names in a single SSL certificate?

2004-08-29 Thread Charles Cranston
Hmm, it's been 10 years since I worked for the networking group here, and we used to use the term "multi-homed" to describe deviation from the old "one machine, one IP address" paradigm. But I guess I don't really know which of the following four situations "multi-homed" really refers to: 1. Having

[Crypt::SSLeay] Compile problems on Linux

2004-08-29 Thread Tijmen Ruizendaal
hello, i'm trying to compile Crypt::SSLeay on a Debian woody box with openssl-0.9.7d-4.backports.org.1 This is the output from Makefile.PL: [16:51:26] [usr:tijmen] [EMAIL PROTECTED] \> perl ./Makefile.PL Found OpenSSL (version OpenSSL 0.9.7) installed at /usr Which OpenSSL build path do you want

Re: How to include multiple common names in a single SSL certificate?

2004-08-29 Thread Dr. Stephen Henson
On Sun, Aug 29, 2004, Ralph Seichter wrote: > Dr. Stephen Henson wrote: > > > Try adding multiple subjectAltName extensions with the option "DNS". > > This is the official way to indicate a hostname putting it in CN is > > just for compatibility with legacy applications. > > I added the followin

Re: How to include multiple common names in a single SSL certificate?

2004-08-29 Thread Ralph Seichter
Dr. Stephen Henson wrote: > Try adding multiple subjectAltName extensions with the option "DNS". > This is the official way to indicate a hostname putting it in CN is > just for compatibility with legacy applications. I added the following options to /etc/ssl/openssl.cnf: commonName_default = www