Re: Retrieve basic information from an existing certificate already in place

2010-12-22 Thread Patrick Patterson
Hi Andy: I have no idea what you are trying to do :) Certificates don't have URLs - it could be argued that in a perfect world, with a global yellow pages, you should be able to look up a Certificate for an entity via LDAP/X.500. (To the rest of the folks on the list - just leave it - I'm kidd

Re: do i need a dedicated ip address for https?

2010-12-22 Thread Badra
On Wed, Dec 22, 2010 at 8:34 AM, Mike Mohr wrote: > I believe you can sort of "get around" that requirement using a > wildcard SSL certificate (e.g. for *.domain.tld). But that only helps > you if you're running multiple subdomains for the same TLD. I think I > heard something about a change to

Re: Building OpenSSL vs Downloaded

2010-12-22 Thread Kenneth Goldman
I use the precompiled openssl from http://www.slproweb.com/products/Win32OpenSSL.html I typically build with gcc, although I've used Microsoft VC++ in the past. Perhaps post the linker error. I can send you a link to a sample makefile if you like. -- Ken Goldman kg...@watson.ibm.com 914-78

Retrieve basic information from an existing certificate already in place

2010-12-22 Thread Andy GOKTAS
Hello, I'm looking into the openSSL command/syntax to be used in order to retrieve information on a certificate via it's URL. Anyone have a good example to accomplish this? All that needs to happen is to Display information on a cert (via Windows command line, but that shouldn't matter). S

FIPS module determination

2010-12-22 Thread Zamora, Robert
Is there a way to determine if OpenSSL binaries were compiled with the FIPS "certified" module v1.2.x ? Compiling OpenSSL FIPS test module gives me the same results using fips_test_suite. Thanks, Robert Zamora __ OpenSSL Projec

FW: ifdef OPENSSL_NO_COMP

2010-12-22 Thread Bhola Ray
I didn't get any responseis there any way someone can help me.. Also if I have a generated a certificate such as newreq.pem what is the command syntax to decrypt the certificate and see the clear texts. -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl

Re: Building OpenSSL vs Downloaded

2010-12-22 Thread hpenaguzman
May I ask which download version are you using?, I tried several and couldn't build it and neither use it with Borland, I got a linker error. Thanks. -Original Message- From: Ryan Pfeifle To: openssl-users Sent: Tue, Dec 21, 2010 4:08 am Subject: RE: Building OpenSSL vs Downloaded

Re: strange behavior of self signed cert ???VeriSign Class 3 Public Primary Certification Authority - G5???.

2010-12-22 Thread Dr. Stephen Henson
On Wed, Dec 22, 2010, Pingzhong Li wrote: > > Didn't see any reply, thought I will ask one simpler questions again. > > If for one root Certificate, there are both expired and unexpired cert (same > DN) at the CA file, which one will be used during certificate verification? > >From testing, if t

Re: strange behavior of self signed cert “VeriSign C lass 3 Public Primary Certification Authority - G5”.

2010-12-22 Thread Pingzhong Li
Didn't see any reply, thought I will ask one simpler questions again. If for one root Certificate, there are both expired and unexpired cert (same DN) at the CA file, which one will be used during certificate verification? >From testing, if there are only those 2 certs at the CA file, the certifi

Re: do i need a dedicated ip address for https?

2010-12-22 Thread Ger Hobbelt
On Wed, Dec 22, 2010 at 7:53 AM, S Mathias wrote: > http://help.godaddy.com/article/1054 > > "# Set up SSL protection on your website." > > is it an inescapable requirement to have a dedicated [not fix] ip address, > when i want to use ssl on my domain? > Not exactly, but you must weigh the cost

Re: do i need a dedicated ip address for https?

2010-12-22 Thread Miguel Ghobangieno
Don't talk to no police, they're working with the guverment. Make your paper money gold, by yourself a bunch of guns. --- On Wed, 12/22/10, S Mathias wrote: > From: S Mathias > Subject: do i need a dedicated ip address for https? > To: openssl-users@openssl.org > Date: Wednesday, December 22, 2

Re: do i need a dedicated ip address for https?

2010-12-22 Thread Richard Levitte
In message <54015.92296...@web121406.mail.ne1.yahoo.com> on Tue, 21 Dec 2010 22:53:07 -0800 (PST), S Mathias said: smathias1972> http://help.godaddy.com/article/1054 smathias1972> smathias1972> "# Set up SSL protection on your website." smathias1972> smathias1972> is it an inescapable requirem