Certificate error

2006-05-28 Thread Lawrence Rose
Hi: I setup the four openSSL examples in Viega et al with certs and ran fine until the 30 day certs expired.  Now after  I cut a new root.pem and sereverCA.pem I cannot pass certificate verification.  Where have I gone wrong? I've tried everything these past several days altering the cnf, recu

Re: OT: Implicit vs explicit SSL

2006-05-28 Thread Victor Duchovni
On Sun, May 28, 2006 at 03:45:31PM -0500, Jim Miller wrote: > Hello everyone, > > My appoligies for this being off topic. My boss go a new pocketPC phone > and the package FlexMail > http://www.webis.net/products_info.php?p_id=mail&dir=wm&tab_id=download. > > I'm trying to get him connected to

OT: Implicit vs explicit SSL

2006-05-28 Thread Jim Miller
Hello everyone, My appoligies for this being off topic. My boss go a new pocketPC phone and the package FlexMail http://www.webis.net/products_info.php?p_id=mail&dir=wm&tab_id=download. I'm trying to get him connected to our cyrus imap server over SSL and one of it's settings is implict vs e

Re: Custom certificate

2006-05-28 Thread Marek Marcola
Hello, > In the issuer and subject fields, I must include a dnQualifierwhich is > a thumbprint of the corresponding public key, that is to say a SHA-1 > hash of the contents of the SubjectPublicKey BIT STRING in the > SubjectPublicKeyInfo field (excluding the DER tag, length, and number o

Re: [error] Certificate Verification: Error (34): unhandled critical extension

2006-05-28 Thread Kyle Hamilton
It is not permissible per RFC to disable critical extension tests. (A 'critical extension' is an extension to a certificate which is used to enforce a particular handling for the certificate. If an implementation does not understand a particular critical extension, then it must abort processing