SSL version number questions

2004-11-03 Thread Bilal Shahid
Hi, I have some more rather basic questions about OpenSSL. 1- Is the TLSv1.0 enabled by default in OpenSSL or do we have to do it somewhere ourselves manually? I am using OpenSSL 0.9.7.3c. 2- How can I find out the SSL version (SSLv2.0, SSLv3.0 or TLSv1.0) that OpenSSL is currently using for the

Problems genning certificates

2004-11-03 Thread Ronald I. Nutter
I am trying to get OpenSSL to work with Freeradius. I am running the CA.all perl script but am getting errors that I cant find the cause for. I have modified the openssl.cnf to put the defaults for my install. I am seeing errors unable to load certificate and missing directory but don't see anyth

Re: Some OpenSSL certificate and key questions

2004-11-03 Thread Charles B Cranston
As for what is happening, I believe that in case 1 the certificate is enabled for TLS Client authentication (that is, for the client to present to the server to authenticate who the client is) while the subroutine is expecting to authenticate a TLS Server certificate: > Case 1: > X509v3 extensions:

Re: Some OpenSSL certificate and key questions

2004-11-03 Thread Bilal Shahid
Hi Charles, Thanks for your reply. I guess I did frame my question in a confusing manner. Basically, I would like to find out how the two extensions "Key Usage" and "Extended Key Usage" behave if both are present in the same certificate. Documentation mentions that "Extended Key Usage" may used

Re: how to decrypt an ssl-cert-request

2004-11-03 Thread Jascha Semke
perfect! exactly what i need :) thank you very much :) greetings Jascha Am Mittwoch, 3. November 2004 13:18 schrieb Bernhard Froehlich: > Jascha Semke wrote: > >[...] > >i have an certificate-request and a key from one person and all the data > > we need of this person for the cert (name, adress,

Re: how to decrypt an ssl-cert-request

2004-11-03 Thread Bernhard Froehlich
Jascha Semke wrote: [...] i have an certificate-request and a key from one person and all the data we need of this person for the cert (name, adress, and so on). how can i decrypt the certificate request, so that i can see, that this person has everything inserted correctly, that i can directly

export certs

2004-11-03 Thread Ronan
i am writing an ldap client to connect with Active directory over ssl. I have finally installed the certificate on the server, but from reading the ldap pages i need to point the functions handling the connection to my local client certificate... how or where do i get the client certificate fro

how to decrypt an ssl-cert-request

2004-11-03 Thread Jascha Semke
hello together, i am new in this mailing list and also a "noob" in ssl. and here is the problem, where i don't know, how to do it: i have an certificate-request and a key from one person and all the data we need of this person for the cert (name, adress, and so on). how can i decrypt the cert