Re: adding purpose to certificate

2006-09-26 Thread Dr. Stephen Henson
On Tue, Sep 26, 2006, Antonio A wrote: > dear Marco, > > how could i insert certificate policies in a > certificate? using openssl 0.9.7 > > like your certificate > > ... > > X509v3 Certificate Policies: > Policy: 2.16.840.1.113733.1.7.1.1 >

Re: adding purpose to certificate

2006-09-26 Thread Dr. Stephen Henson
On Tue, Sep 26, 2006, Marco Rossi wrote: > > > Maybe I don't understand what -purpose shows: > It shows the purposes for which the certificate can be used. This is determined by the extensions the CA decides to put in the certificate. An end user can't change this. > If I issue the command y

Re: adding purpose to certificate

2006-09-26 Thread Antonio A
dear Marco, how could i insert certificate policies in a certificate? using openssl 0.9.7 like your certificate ... X509v3 Certificate Policies: Policy: 2.16.840.1.113733.1.7.1.1 CPS: https://www.verisign.com/CPS User Notice

Re: adding purpose to certificate

2006-09-26 Thread Marco Rossi
--- "Dr. Stephen Henson" <[EMAIL PROTECTED]> wrote: > On Tue, Sep 26, 2006, Marco Rossi wrote: > > > Dear all, > > > > I'd need to change my certificate purpose allowing > it to used for SSL client authentication. > > > > I'm using openssl 0.9.8a on fedora core 5, I've > been following the ma

Re: adding purpose to certificate

2006-09-26 Thread Dr. Stephen Henson
On Tue, Sep 26, 2006, Marco Rossi wrote: > Dear all, > > I'd need to change my certificate purpose allowing it to used for SSL client > authentication. > > I'm using openssl 0.9.8a on fedora core 5, I've been following the man page > about x509 http://www.openssl.org/docs/apps/x509.html > at t

adding purpose to certificate

2006-09-26 Thread Marco Rossi
Dear all, I'd need to change my certificate purpose allowing it to used for SSL client authentication. I'm using openssl 0.9.8a on fedora core 5, I've been following the man page about x509 http://www.openssl.org/docs/apps/x509.html at the section "TRUST SETTING". Before trying my cert purpos

X509 v3 extensions and Digest Algorithms

2006-09-26 Thread Antonio A
dear friends of OpenSSL, i use OpenSSL-0.9.7 in an application that generates certificates with x509 v3 extensions. i have some questions: i) according to one post (http://www.mail-archive.com/openssl-dev@openssl.org/msg11608.html) OpenSSL-0.9.7 does not support otherName as a valid option for Su

Re: Error-forgiving cypher suite? (Encrypted tape backups)

2006-09-26 Thread Richard Conlan
Why doesn't OpenSSL support AES in CTR-mode? With CTR-mode you'd only lose the corrupted block...and it is even in the OpenSSL headers...but to my understanding it is not actually implemented? This may make it worth considering another crypto library if there any out there with a good CTR-mode impl

Re: Error-forgiving cypher suite? (Encrypted tape backups)

2006-09-26 Thread Dr. Stephen Henson
On Tue, Sep 26, 2006, Alexander Mack wrote: > Hi everyone! > > I want to use openssl aes256 cypher to encrypt a 'tar'ed directory right > before it's copied to tape. This line does the job very well: > > tar cvzpf - $TARGETFILE | openssl enc -aes-256-cbc -salt -pass > "pass:$ENCPASS" -out $TAPED

Error-forgiving cypher suite? (Encrypted tape backups)

2006-09-26 Thread Alexander Mack
Hi everyone! I want to use openssl aes256 cypher to encrypt a 'tar'ed directory right before it's copied to tape. This line does the job very well: tar cvzpf - $TARGETFILE | openssl enc -aes-256-cbc -salt -pass "pass:$ENCPASS" -out $TAPEDEV with ENCPASS set to the password. But I'm having secon

RE: OpenSSL on AS400

2006-09-26 Thread Mark
Hi Dave, Thanks for the reply. > We were faced with this same challenge recently. There is no > port of the > OpenSSL libraries for the native AS400 environment, but the i/Series > hardware and OS/400 now support the execution of AIX binaries in the > Portable Application Software Environment (

RE: OpenSSL on AS400

2006-09-26 Thread Mark
> We have a client running on AS400 which communicates over tcp/ip that > requires to connects to our server via SSL. I really know almost > nothing about AS400. Does OpenSSL work on AS400? Are there any > special considerations for this platform? I should have said "Does the latest version of

RE: OpenSSL on AS400

2006-09-26 Thread mclellan_dave
There are many special considerations. The OS/400 operating system is a decent modern OS and is being enhanced actively. For smaller shops who had System/36 and 38, AS400 is a logical new generation environment. We were faced with this same challenge recently. There is no port of the OpenSSL l

stunnel 4.18 released

2006-09-26 Thread Michal Trojnara
Version 4.18, 2006.09.26, urgency: MEDIUM: * Bugfixes - GPF on entering private key pass phrase on Win32 fixed. - Updated Win32 OpenSSL DLLs. - Minor configure script update. Home page: http://stunnel.mirt.net/ Download: ftp://stunnel.mirt.net/stunnel/ sha1sum for stunnel-4.18.tar.gz: 3ed3

About patch-CVE-2006-4339

2006-09-26 Thread Kan Arita
Hi All, I let the following patch apply to openssl-0.9.6m. ・http://www.openssl.org/news/patch-CVE-2006-4339.txt but make test(test_ss) is failed(The following reference). I think that degrade occurs in rsa_sign.c. May not this patch apply to 0.9.6? Though there is not new release of 0.9.6 serie

OpenSSL on AS400

2006-09-26 Thread Mark
Hi All, We have a client running on AS400 which communicates over tcp/ip that requires to connects to our server via SSL. I really know almost nothing about AS400. Does OpenSSL work on AS400? Are there any special considerations for this platform? Thanks, Mark _