Re: I had a hard time setting up a CA / enhancment request for openssl.cnf

On Thu, Jan 19, 2006, Ray wrote: > > So my enhancment request is to find a way that the command > perl CA.pl -newca > > uses the section [ v3_ca ] automatically. > > Sorry about that. It is a bug that is fixed in the latest snapshots but not yet in an official release. Steve. -- Dr Stephen N

Re: Ciphers in X509 certificate

On Wed, Jan 18, 2006, am0ykam0te (sent by Nabble.com) wrote: > > i see.. we just updated our current OpenSSL and added this cipher and > whenever we try to establish a connection it keeps on using other ciphers.. > how can i test this cipher? Well one way is to set the server cipher list so it *

Re: Ciphers in X509 certificate

i see.. we just updated our current OpenSSL and added this cipher and whenever we try to establish a connection it keeps on using other ciphers.. how can i test this cipher? View this message in context: Re: Ciphers in X509 certificate Sent from the OpenSSL - User forum at Nabble.com.

I had a hard time setting up a CA / enhancment request for openssl.cnf

  Hello OpenSSL users,   first let me say thank you for a great toolkit ! I finally took the time to learn more about certificates and it was time well spent ! :-)   The reason I send this mail is that I had quite a hard time setting up a CA cert.   ( I used Win32OpenSSL-v0.9.8a.exe )   As a

Re: How to build openssl for Mac-Intel computers

Hi William, thanks for your hint. I'd give it a try, but I must admit that I'm neither a "Configure"- nor a "Perl"-Guru :'( A short description where to change the appropriate setting(s) would be helpful. Maybe someone has already done it? Jörg >> Hi everybody, >> >> we have a new platform -

Re: How to build openssl for Mac-Intel computers

Jörg Eyring wrote: Hi everybody, we have a new platform - Macs with Intel processors. Is there a chance to build a static library (i386 code) for linking in Xcode 2.2? A static library with ppc code has been done already. I'd like to end up with a Universal Binary of my code. For fun; doesn't

Private Key and request in same file

hi all..  'CA.pl -newreq'     puts the 'private key' and the 'request' in the same file. Is there a way to put seperately? During a discussion a week bac, Steve mentioned that new CA.pl script will put the private key seperately.  my version is 0.9.7g. do i need to update? Thanks in advance, Sa

How to build openssl for Mac-Intel computers

Hi everybody, we have a new platform - Macs with Intel processors. Is there a chance to build a static library (i386 code) for linking in Xcode 2.2? A static library with ppc code has been done already. I'd like to end up with a Universal Binary of my code. Thanks a lot for any ideas! -

Re: x509 CRL v2

Dr. Stephen Henson wrote: On Tue, Jan 17, 2006, Daniel Garca Franco wrote: I would like to use other CRL Revoke Reason as "superseded", "unspecified", etc... with the CRL Entry Extension InvalidityDate, not that the use of CRL Entry Extension InvelidityDate force to set the CRL Revoke R

Solved: Signing Certificate corrupts Subject Name using name_opt or cert_opt

It seems the old CA.pl file used -preserveDN when signing a certificate, adding this created a certificate with the correct subject whether name_opt and cert_opt are commented out or not # openssl x509 -subject -in test.name_opt.preserveDN.crt -noout subject= /DC=uk/DC=ac/DC=st-andrews/CN=Or

Re: Signing Certificate corrupts Subject Name using name_opt or cert_opt

Dr. Stephen Henson wrote: On Wed, Jan 18, 2006, Duncan Brannen wrote: Hi, I've got a certificate request with the the subjectname cn=database,cn=OracleContext,dc=st-andrews,dc=ac,dc=uk I've signed one of these previously with openssl after adding domainComponent= optional to the

Re: Ciphers in X509 certificate

On Tue, Jan 17, 2006, am0ykam0te (sent by Nabble.com) wrote: > > Can anybody help me in steps in creating a certificate with the cipher > RSA_3DES_EDE_CBC_SHA.. No because your question doesn't make sense. That algorithm is an SSL/TLS cipher which doesn't have much to do with certificates. The o

Re: Signing Certificate corrupts Subject Name using name_opt or cert_opt

On Wed, Jan 18, 2006, Duncan Brannen wrote: > > Hi, > I've got a certificate request with the the subjectname > > cn=database,cn=OracleContext,dc=st-andrews,dc=ac,dc=uk > > I've signed one of these previously with openssl after adding > domainComponent= optional > to the openssl.cnf f

Signing Certificate corrupts Subject Name using name_opt or cert_opt

Hi, I've got a certificate request with the the subjectname cn=database,cn=OracleContext,dc=st-andrews,dc=ac,dc=uk I've signed one of these previously with openssl after adding domainComponent= optional to the openssl.cnf file under policy_anything. However, since installing a new ve

Re: Ciphers in X509 certificate

Can anybody help me in steps in creating a certificate with the cipher RSA_3DES_EDE_CBC_SHA hi, You can find documentation about certificate creation in the following link.. http://www.openssl.org/docs/HOWTO/certificates.txt hope this helps, Samy

RE: how to install MOD_SSL on Windows2003 server .. plz help!

I still cant install my mod_ssl .. IF anyone exists to install MOD_SSL on windows2003 server , plz let me know how it will be done ... I think there should be a shell $ to install mod_ssl on win2003 server .. Plz help me find that shell .. or other solution for this problem thanks -Origi

change key after EVP_Encrypt_init(...,key,..)

Hi, char[] key = "abcde"; EVP_Encrypt_init(...,key,..) key = "cdefg" Will I have to recall EVP_Encrypt_Init? Thanks, Felix __ OpenSSL Project http://www.openssl.org User Support Mailing List

Re: RAND_Load_File using /dev/random

> It depends upon how secure you need to be and your threat model. Likely, >128 bytes is more than enough. If security is not critical and you're just >experimenting, switching to '/dev/urandom' should be fine. > > Yes i have done this.. > If you have control over the systems your

Ciphers in X509 certificate

Can anybody help me in steps in creating a certificate with the cipher RSA_3DES_EDE_CBC_SHA.. View this message in context: Ciphers in X509 certificate Sent from the OpenSSL - User forum at Nabble.com.