Re: Multi-value RDNs and openssl.cnf format

2006-09-20 Thread James Lever
On 21/09/2006, at 1:48 PM, Dr. Stephen Henson wrote: On Thu, Sep 21, 2006, James Lever wrote: problems making Certificate Request 9407:error:0B083077:x509 certificate routines:X509_NAME_ENTRY_create_by_txt:invalid field name:x509name.c:285:name=+OU Hmmm, which version of OpenSSL is this? I st

Re: Multi-value RDNs and openssl.cnf format

2006-09-20 Thread Dr. Stephen Henson
On Thu, Sep 21, 2006, James Lever wrote: > Hi Stephen, > > Thank you for your response. > > On 21/09/2006, at 10:08 AM, Dr. Stephen Henson wrote: > > >On Thu, Sep 21, 2006, James Lever wrote: > >>I'm trying to work out how to create a multi-value RDN using an > >>automated openssl.cnf file as p

RE: Runtime link problems on HP-UX

2006-09-20 Thread Fukuba, Yoshiki
Hi, Symbols inside an object can be hidden by "+e" or "-h" option of HP-UX ld command. 1. Compile your source and link them to create an object. (do not link it with any libs at this time) % cc -c -o source1.o source1.c % cc -c -o source2.o source2.c % ld -r -o main.o sou

RE: Creating Certificates Via The SSL/Crypto Api's

2006-09-20 Thread David Schwartz
Please don't top post. >> Look at apps/x509.c function x509_certify(). > you're kidding right? That has to be some of the most atrocious > and confusing code i have ever seen. I dont suppose anyone has > anything more practical as an example? > Perhaps some documentation on the process or such

Re: Multi-value RDNs and openssl.cnf format

2006-09-20 Thread James Lever
Hi Stephen, Thank you for your response. On 21/09/2006, at 10:08 AM, Dr. Stephen Henson wrote: On Thu, Sep 21, 2006, James Lever wrote: I'm trying to work out how to create a multi-value RDN using an automated openssl.cnf file as per RFC2253. From the RFC, it has this example: OU=Sales+C

Re: Creating Certificates Via The SSL/Crypto Api's

2006-09-20 Thread edf green
you're kidding right?  That has to be some of the most atrocious and confusing code i have ever seen.  I dont suppose anyone has anything more practical as an example?  Perhaps some documentation on the process or such. On 9/20/06, Marek Marcola <[EMAIL PROTECTED]> wrote: Hello,> Long time

Re: Multi-value RDNs and openssl.cnf format

2006-09-20 Thread Dr. Stephen Henson
On Thu, Sep 21, 2006, James Lever wrote: > Hi All, > > I'm trying to work out how to create a multi-value RDN using an > automated openssl.cnf file as per RFC2253. From the RFC, it has this > example: > >Here is an example name containing three RDNs, in which the first > RDN >is m

Multi-value RDNs and openssl.cnf format

2006-09-20 Thread James Lever
Hi All, I'm trying to work out how to create a multi-value RDN using an automated openssl.cnf file as per RFC2253. From the RFC, it has this example: Here is an example name containing three RDNs, in which the first RDN is multi-valued: OU=Sales+CN=J. Smith,O=Widget Inc.,C=US

Re: Creating Certificates Via The SSL/Crypto Api's

2006-09-20 Thread Marek Marcola
Hello, > Long time reader, first time poster. I have a problem > currently with the generation of a SSL cert using the libssl/crypto > apis. I can generate keys fine, but i cannot find any documentation > on how to actually create a cert file via anything other then the > openssl command l

Creating Certificates Via The SSL/Crypto Api's

2006-09-20 Thread edf green
Hello all,    Long time reader, first time poster. I have a problem currently with the generation of a SSL cert using the libssl/crypto apis.  I can generate keys fine, but i cannot find any documentation on how to actually create a cert file via anything other then the openssl command line too

Re: Get Information about SSL Handshake

2006-09-20 Thread Marek Marcola
Hello, > Thank you very much this works fine but how do I get the information if > diffie hellman (DH) is used to negotiate the key? > > I wanted to compare the differnce in cpu consumption and time delay if > session reuse is used or not! (Keyexchange with Diffie Hellman) > Therefore I set: > >

Re: OpenSSL Hanging When Attempting To Generate Key File

2006-09-20 Thread Bernhard Froehlich
Jeanna Geier wrote: [...] $ openssl genrsa -des3 -out server.key 2048 Loading 'screen' into random state - done Generating RSA private key, 2048 bit long modulus +++ ..+++ Hmm, I have tested the command line on my Win32 version of openssl an

OpenSSL Hanging When Attempting To Generate Key File

2006-09-20 Thread Jeanna Geier
Hi All- I'm new to OpenSSL, so I hope that someone out there can help me with this problem. I have been searching mailing lists and googling for the past few of days with no luck, so any help that you can offer would be greatly appreciated!! My main goal is to build Postgres with ssl enable

Re: PIN request on Certitficate Revocation

2006-09-20 Thread Bernhard Froehlich
[EMAIL PROTECTED] wrote: Hi, i have setup a small CA and i use the Aladin etoken Pro USB CA to host the root private key. the revocation operation (openssl ca -revoke cert.pem ...) request the User PIN. Does someone know why the PIN is required for this operation? Does anybody know if it is po

PIN request on Certitficate Revocation

2006-09-20 Thread philippe . lal
Hi, i have setup a small CA and i use the Aladin etoken Pro USB CA to host the root private key. the revocation operation (openssl ca -revoke cert.pem ...) request the User PIN. Does someone know why the PIN is required for this operation? Does anybody know if it is possible to revoke certifica