[no subject]

2007-09-30 Thread Liam Whalen
Hi, I'm building a program for the YMCA I work at that needs to retrieve an ODBC username and password from a server. I doubt anyone would try to sniff the data however for completion's sake I would like to implement an SSL connection between my client and my server. However if I take this o

Re: recompile applications when upgrade openssl?

2007-09-30 Thread Victor Duchovni
On Fri, Sep 28, 2007 at 06:26:36PM +0200, peter pilsl wrote: > > On my linuxserver many application rely on openssl: from apache over > cyrus-imap > to sendmail and many others like named. > > Now I'd finally like to upgrade openssl from 0.9.6 to 0.9.8e to fix some > security-issues. (I know it

Re: certificate withou private key

2007-09-30 Thread Massimiliano Pala
Hi, you do not need the private key corresponding to the public key in the certificate in order to generate it. You need only the public key, and the private key from the issuing entity (the CA) to generate the certificate signature. If you are issuing a self-signed certificate, then you'll need

Re: certificate withou private key

2007-09-30 Thread Bernhard Fröhlich
Mathias Tausig schrieb: Hy! Is it possible to create a certificate with openssl without using the coresponding private key (which is stored in a smartcard) but with the public key only? Mathias It depends on which private key you are talking about... A certificate as such is a piece of inf

Re: certificate withou private key

2007-09-30 Thread Michael Sierchio
Yes. No. Maybe. Such a question suggests some possible confusion. A certificate is a binding of a keypair to an identity. While only the public key is contained in the cert, some proof of possession of the corresponding private key is required. This usually requires a certificate signing req

Re: certificate withou private key

2007-09-30 Thread Marek Marcola
Hello, > Is it possible to create a certificate with openssl without using the > coresponding private key (which is stored in a smartcard) but with the public > key only? To create certificate with OpenSSL you need Certificate Request. This request should be generated with your smartcard software

certificate withou private key

2007-09-30 Thread Mathias Tausig
Hy! Is it possible to create a certificate with openssl without using the coresponding private key (which is stored in a smartcard) but with the public key only? Mathias __ OpenSSL Project http:/

RE: Unsigned CRL

2007-09-30 Thread BSC
David Schwartz wrote: > > >> I need this CRL for testing needs )) > > That really doesn't make any sense. What is the point of testing with > something that bears no relationship to anything in the real world? > > If you want to test if your CRL logic works, create your own test CA, your > o