Re: Issues creating Certificate Authority

2004-11-17 Thread Dr. Stephen Henson
On Wed, Nov 17, 2004, Dan O'Brien wrote: > > > Hi Steve, thanks for the response. We did not get this error (or if we > have, we haven't seen it): > > Using configuration from /some/path/openssl.cnf > Unable to load config info > > But we did get this error upon attempting to

Re: Issues creating Certificate Authority

2004-11-17 Thread Dan O'Brien
On Nov 17, 2004, at 1:01 PM, Dr. Stephen Henson wrote: On Wed, Nov 17, 2004, Dan O'Brien wrote: Hi, We're trying to generate a Certificate Authority on our Debian/Apachessl server. Here's the command we're entering: openssl req -new -x509 -keyout private/cakey.pem -out cacert.pem -days 7000 The abo

RE : Certificate Chain

2004-11-17 Thread Frédéric Donnat
Thanks Steve That's exactly that I wanted. ;) In fact I'd like to test client certification in our product. I'm using openssl s_client as testing utility. I tried it with self-signed certificate, certificate (with different CA and their associated CRL), and I wanted to try with sending a full c

Re: Certificate Chain

2004-11-17 Thread Dr. Stephen Henson
On Wed, Nov 17, 2004, Frédéric Donnat wrote: > Hi all, > > I've no probleme generating CA, client key, CSR, and certificate even export > in, pkcs12 format. > > I do not succeded to create certificate chain. > I have a look at x509, pkcs7 pkcs12 options without any success. Maybe i > missed so

Certificate Chain

2004-11-17 Thread Frédéric Donnat
Hi all, I've no probleme generating CA, client key, CSR, and certificate even export in, pkcs12 format. I do not succeded to create certificate chain. I have a look at x509, pkcs7 pkcs12 options without any success. Maybe i missed something... As someone the answer?. Or can anyone put me in th

Re: Issues creating Certificate Authority

2004-11-17 Thread Dr. Stephen Henson
On Wed, Nov 17, 2004, Dan O'Brien wrote: > > Hi, > > We're trying to generate a Certificate Authority on our > Debian/Apachessl server. Here's the command we're entering: > > openssl req -new -x509 -keyout private/cakey.pem -out cacert.pem -days > 7000 > > The above command kicks back the fo

Issues creating Certificate Authority

2004-11-17 Thread Dan O'Brien
Hi, We're trying to generate a Certificate Authority on our Debian/Apachessl server. Here's the command we're entering: openssl req -new -x509 -keyout private/cakey.pem -out cacert.pem -days 7000 The above command kicks back the following error: unable to find 'distinguished_name' in config pro

Config file

2004-11-17 Thread Zerg
Hi. Is it possible to write to config file with CONF API? __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager

Re: AW: doubt regd X509 Certificate

2004-11-17 Thread Peter Sylvester
> > Sravan, > > the AlgorithmIdentifier in the Certificate definition tells you which > algorithms have been used to produce and to verifify the certificate > signature. The AlgorithmIdentifier in the TBSCertificate tells you which > algorithms to use applying the key included. > No. eys to be

Re: AW: doubt regd X509 Certificate

2004-11-17 Thread Sravan
Hi, first of all thnx for the reply. but what you say seems to contradict what the rfc says... here are the definitions from the rfc... this is for the field in the Certificate The signatureAlgorithm field contains the identifier for the cryptographic algorithm used by the CA to sign this cert

AW: doubt regd X509 Certificate

2004-11-17 Thread thomas . beckmann
Sravan, the AlgorithmIdentifier in the Certificate definition tells you which algorithms have been used to produce and to verifify the certificate signature. The AlgorithmIdentifier in the TBSCertificate tells you which algorithms to use applying the key included. regards Thomas > -Ursprung

doubt regd X509 Certificate

2004-11-17 Thread Sravan
Hello all, I have a doubt regd. the format of X509 Certificate. I know that this doubt is not at all related to OpenSSL but I can't find any other place where in I can get good replies for the doubt. So, here is it... The syntax of an X509Certificate is as follows : Certificate ::= SEQUENCE {