Re: RE: how to merge multiple public domain certs into one file?

2009-11-15 Thread Victor B. Wagner
On 2009.11.15 at 21:01:13 -0500, H??cber C??rdova wrote: > Hi *, > > Certainly you can configure Apache to use virtualHosts based on domain > names, > and this works perfect with HTTP (1.1). However, this cannot be achieved > using > SSL, and the answer is simple, the SSL is estab

Re: openssl and hardware tokens

2009-11-15 Thread Victor B. Wagner
On 2009.11.13 at 04:44:02 -0800, Mansour Dagher wrote: > Hi all, > > > if certificates and associated keys are stored on HW (Sun crypto card for > example), is there a way in openssl to specify the card as the location of > these certificates/kets? > > It appears from the methods below, the o

RE: how to merge multiple public domain certs into one file?

2009-11-15 Thread Hécber Córdova
Hi, Ok, mod_ssl assume only one server certificate per file (with the exception of the cacert file), and this is because apache doesn't have any way to select the best certificate for a particular virtual host, and only one certificate is assigned for a particular virtual host.

RE: how to merge multiple public domain certs into one file?

2009-11-15 Thread ohaya
Hécber and Lou, Oops. I missed the part in the original post about this being for SSL-enabled VirtualHosts :(... Sorry for any confusion... Jim "Hécber Córdova" wrote: > Hi *, > > Certainly you can configure Apache to use virtualHosts based on domain > names, > and this

Re: Accessing PBKDF2 from command line

2009-11-15 Thread Victor Duchovni
On Mon, Nov 16, 2009 at 11:52:26AM +1000, Anthony Thyssen wrote: > I was reading the openssl-users mail list, (I am not on that list) > where you mentioned the PBKDF2 openssl library function. You should join, at least long enough to ask the question that interests you. Further follow-up will be

RE: how to merge multiple public domain certs into one file?

2009-11-15 Thread Hécber Córdova
Hi *, Certainly you can configure Apache to use virtualHosts based on domain names, and this works perfect with HTTP (1.1). However, this cannot be achieved using SSL, and the answer is simple, the SSL is established using the server IP, and during the SSL negotiation (handshak

Re: Accessing PBKDF2 from command line

2009-11-15 Thread Victor Duchovni
On Mon, Nov 16, 2009 at 01:45:07PM +1000, Anthony Thyssen wrote: > In Summery the "openssl" command is deficient. > > [ various limitations of enc(1) ] At the end of the day, OpenSSL is a *library*, not an end-user product, and enc(1) and friends are developer utilities and "demo" tools. When y

Re: Accessing PBKDF2 from command line

2009-11-15 Thread Anthony Thyssen
On Sun, 15 Nov 2009 21:44:55 -0500 Victor Duchovni wrote: | > | >Subject:Re: Encapsulation of AES_KEY | >Date: 2009-11-11 18:49:38 | > | > The problem is the openssl command does not make this function available | > either directly as a password to key+IV converter, or as part

Re: how to merge multiple public domain certs into one file?

2009-11-15 Thread ohaya
Hi, Unless I'm misunderstanding things, you *can*, by using ServerName inside each of the sections: http://httpd.apache.org/docs/2.0/vhosts/name-based.html Jim Lou Picciano wrote: > I didn't think it possible to server multiple virtual SSL domains from one > Apache instance (on the s

Re: About Crypto Library usage and...

2009-11-15 Thread Mounir IDRASSI
Hi, OpenSSL can definitely be used to implement a port of Crypto API under Linux but I advise you to take a look at Winelib from the "Wine" project (http://www.winehq.org/winelib). They have implemented, among other things, the whole Crypto API functions along with MS CSPs. Although it's not b

Re: how to merge multiple public domain certs into one file?

2009-11-15 Thread Lou Picciano
I didn't think it possible to server multiple virtual SSL domains from one Apache instance (on the same IP, at least). I suppose if you use different IP numbers this constraint goes away. Has something changed about Apache in this regard? Then, you have the matter of: If each virtual SSL doma

how to merge multiple public domain certs into one file?

2009-11-15 Thread M C
Hi... I've been struggling with how to concatenate multiple public domain certs into one crt file. Basically, I have 5 SSL virtual host domains running on 1 apache httpd server and each host has a separate GeoTrust domain certificate. Instead of having 5 individual public *.crt files, is there an