Re: Question about extensions

2010-08-08 Thread Bram Cymet
I have attempted a number of different command line commands. They are all similar to: openssl x509 -extfile req.conf -extensions client_cert -in bcymet-cert.pem -out test.pem openssl x509 -req -in req.pem -sha1 -extfile req.conf -extensions client_cert -CA CA.pem -CAkey cakey.pem -out test.p

Re: Question about extensions

2010-08-08 Thread Dr. Stephen Henson
On Fri, Aug 06, 2010, Bram Cymet wrote: > It complains about the client_cert section. > > Attached is the conf file. > > I am using openssl 1.0.0. > That's odd, I just tried it on the latest 1.0.0-stable (1.0.0a should be near enough) and other than the typo for prompt it works fine. What com

Re: Verifying X509 Certificates Using The OpenSSL API

2010-08-08 Thread Peter Sylvester
try rehash the certs I am loading the certificate stores from /etc/ssl/certs which contains the stores that mozilla, chrome, and the like all verify from, but no matter what I do I can't get a single certificate to verify.