IP address as subjectaltname works with firefox but not MS internet explorer

2011-01-14 Thread Ted Wynnychenko
Hello: I have been trying to figure this out for the last week, and am unable to, so I thought I would ask. I am not sure if this is the right place, but it seemed a good place to start. Here is my issue: I have a apache web server which employs a virtual server for SSL connections. I have a c

RE: Custom Attributes in the Subject of X.509 Certificate

2011-01-14 Thread Rene Hollan
Your best off getting a private assigned number for this (or rather, the root of all your organization's OIDs). Look at http://www.iana.org/assignments/enterprise-numbers From: owner-openssl-us...@openssl.org [owner-openssl-us...@openssl.org] on behalf of

Make in openssl, sign in win serv 2008r2?

2011-01-14 Thread mlevineisme
Hello there. I would like to create a request in openssl and have it signed by a 2008R2 CA. Anyone know is this is possible? Googling for two hours + didn't seem to turn up much of a guide. I get stuck after creating a csr on how to import that into the Win2008R2CA box. Back story: I'm pretty new

unable to get local issuer certificate

2011-01-14 Thread Jonathan Taylor
I am trying to setup a TurnKey(debian based) MediaWiki installation to contact an LDAP server(W2K3) over SSL but I am having issues with the SSL part. I have setup the LDAP server as a certificate authority and have created my RSA private key as follows: openssl req -new -newkey rsa:2048 -node

Re: How exactly is symmetric key constructed from a passphrase?

2011-01-14 Thread Mounir IDRASSI
Hi, The function EVP_BytesToKey is used internally by this command (and others) in order to create a key from a password. The iteration count is set to 1. Look at the following link for more information : http://www.openssl.org/docs/crypto/EVP_BytesToKey.html Cheers, -- Mounir IDRASSI IDRIX

Building with fipsld

2011-01-14 Thread M Sabin
Hello, I am trying to build an application and linking it with a FIPS capable version of openssl. I followed all the steps in the manual and have put the fipscanister.o and fips_remain.c (along with the .sha1 files) in the /usr/lib directory. After building openssl-0.9.8q, i have the fipsld prog

How exactly is symmetric key constructed from a passphrase?

2011-01-14 Thread Calvert Remillard
Consider following: > openssl aes-256-cbc -e -nosalt -pass pass:TEST -in FILE -out FILE.enc -P key=033BD94B1168D7E4F0D644C3C95E35BF98D6BC98DA097F25270DEC053083AACF iv =8BEAB338FC102B2A12933636C6EB7D59 How does passphrase "TEST" become "key=033BD94B1168D7E4F0D644C3C95E35BF98D6BC98DA097F25270DEC05