Clarifications on PEM and DER formats.

Hi All: I have a question on Certifiate formats and functions used to load certificate files into CTX object. As per the documents: SSL_CTX_use_certificate_chain_file () loads a certificate chain from file into ctx. The certificates must be in PEM format and must be sorted startin

Re: openssl interop with bouncy castle

Hi, Sorry to trouble you again. :) I tried the padding approach that I described in my prev mail. But still no luck. I am concerned about the block size given by the EVP_CIPHER_block_size. For example if I'm using 3-DES (block size=8)a buffer of size 64 to call EVP_CipherUpdate and my plain t

Re: Validating a certificate for an expiry: is it on UTC or local time?

UTC __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

Re: AGAIN: Query on CRL distribution point

On Mon, Dec 18, 2006, [EMAIL PROTECTED] wrote: > > Hi all, > > I am just worling on a certificate profile an I need to include a cdp in the > following form: > > ldap://my.company.com/CN=Name,OU=Department,O=Company,C=DE?certificateRevocationList > > So the cdp should point to the crl in a d

Validating a certificate for an expiry: is it on UTC or local time?

Hello openssl-users, When OpenSSL routines are used to check if a cert is expired - what the time is used - is it a local time or UTC? Thank you in advance. -- Best regards, Tony mailto:[EMAIL PROTECTED] _

Re: Creating CA problem

At 15:49 18-12-2006, you wrote: So solved this problem. First deinstall the openssl 0.9.8d than go to /usr/bin and form this catalog delete openssl after this install openssl form ports Then try CA.pl (should works) I did it on FreeBSD 6.0 release regards Maciej Thanks Maciej! I also deleted

Re: AGAIN: Query on CRL distribution point

You could put the commas in the URL in an escaped form. (The escape for ',' is "%2C".) ldap://my.company.com/CN=Name%2COU=Department%2CO=Company%2CC=DE?certificateRevocationList -Kyle H On 12/18/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: Hi all, I am just worling on a certificate prof

AGAIN: Query on CRL distribution point

Hi all, I am just worling on a certificate profile an I need to include a cdp in the following form: ldap://my.company.com/CN=Name,OU=Department,O=Company,C=DE?certificateRevocationList So the cdp should point to the crl in a directory on a certain server and the access protocal is ldap. >

Patrick Presto is out of the office.

I will be out of the office starting 12/18/2006 and will not return until 12/19/2006. I am out of the office today but will be returning tomorrow. If there is an emergency please page the ESP oncall Net Tool Pin #19005

Re: Creating CA problem

So solved this problem. First deinstall the openssl 0.9.8d than go to /usr/bin and form this catalog delete openssl after this install openssl form ports Then try CA.pl (should works) I did it on FreeBSD 6.0 release regards Maciej Jeppe Bundsgaard wrote: > > I have just upgraded to FreeBSD 6.1

Re: Creating CA problem

I have just upgraded to FreeBSD 6.1 - hoping that it would solve the problem - but no... So I guess that even when reinstalling openssl the CA.pl-script remains the same - so how do I upgrade this script. Can I just find it on CVS and overwrite it? Jeppe At 09:05 18-12-2006, you wrote: Which pl

Re: Creating CA problem

Which platform you're using? I tried openssl 0.9.8d in Fedora 3, the same problem occurs. Then I tried it on Cygwin (the same zip contents), everything work just fine Original Message Subject: Re:Creating CA problem From: Jeppe Bundsgaard <[EMAIL PROTECTED]> To: openssl-user