RE: OpenSSL and apache2 wildcard self-signed certificate for nested subdomain

2011-12-15 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of rey sebastien > Sent: Wednesday, 14 December, 2011 07:33 > I have some problem with nested subdomain and wildcard openssl > certificate.. > When i create the self signed certificate, i enter CN = > *.parisgeo.cnrs.fr,

stateOrProvinceName field problem when signing CSR

2011-12-15 Thread Mick
Hi All, I've generated a cakey.pem and cacert.pem on my PC. Uploaded the cacert.pem to my router and used its gui to generate a CSR. When I try to sign this CSR file back on my PC I'm getting this error: = $ openssl ca -config ./openssl_VPN.cnf -days 1095 -ce

Re: Special character in CA name

2011-12-15 Thread gkout
Sorry Ronald I don't follow... ronald braswell-2 wrote: > > How do we get to your place? > > > > On Tue, Dec 13, 2011 at 4:35 PM, gkout wrote: > >> >> Hello again, >> >> This time I have an issue with a special character in the CA name which >> is >> converted by openssl. >> ESPA\xC3\x91A

Re: Special character in CA name

2011-12-15 Thread ronald braswell
How do we get to your place? On Tue, Dec 13, 2011 at 4:35 PM, gkout wrote: > > Hello again, > > This time I have an issue with a special character in the CA name which is > converted by openssl. > ESPA\xC3\x91A which should read "ESPAÑA" with an "Ñ". > > Any ideas on this? > > Thanks > -- > Vi

Re: [openssl-users] Re: Special character in CA name

2011-12-15 Thread gkout
Hi Steve, oneline seems to do the job. Issuer: C = ES, O = xxx ESPAÑA, CN = xxx ESPAÑA-xx All that is left now is to feed this into apache using UTF-8 format. Another challenge :) Dr. Stephen Henson wrote: > > On Thu, Dec 15, 2011, gkout wrote: > >> >> Hi Erwann, >> >> Putty is set to t

Re: pkcs#7 sign with OpenSSL

2011-12-15 Thread Dr. Stephen Henson
On Thu, Dec 15, 2011, Pietro Romanazzi wrote: > Hi, > afraid this question has been already issued but I did not find any solution > surfing the web. > I need to sign data with a RSA private key and obtain a pkcs#7 envelope with > data, signature > and certificate. > In the past I remember I fo

Re: [openssl-users] Re: Special character in CA name

2011-12-15 Thread Dr. Stephen Henson
On Thu, Dec 15, 2011, gkout wrote: > > Hi Erwann, > > Putty is set to translate to UTF-8. > Unfortunately I can not send this certificate. It was generated by another > authority and sent to me, which means I can not re-try generating it again. > > One note: The file is a chain CA file, contai

pkcs#7 sign with OpenSSL

2011-12-15 Thread Pietro Romanazzi
Hi, afraid this question has been already issued but I did not find any solution surfing the web. I need to sign data with a RSA private key and obtain a pkcs#7 envelope with data, signature and certificate. In the past I remember I found the solution with OpenSSL command line. Unfortunately I'

OpenSSL with pinpad reader

2011-12-15 Thread Sandrine Bideau
Hello I would like to test the connexion to my apache server with the s_client fonction using the pinpad reader in OpenSSL The apache server is configure to use TLS. It is possible with OpenSSL ? How I can do that ? Thanks in advance for your answer ___

OpenSSL with pinpad reader

2011-12-15 Thread Sandrine Bideau
Hello I would like to test the connexion to my apache server with the s_client fonction using the pinpin OpenSSL The apache server is configure to use TLS. __ OpenSSL Project http://www.openssl.org

Re: [openssl-users] Re: Special character in CA name

2011-12-15 Thread gkout
Hi Erwann, Putty is set to translate to UTF-8. Unfortunately I can not send this certificate. It was generated by another authority and sent to me, which means I can not re-try generating it again. One note: The file is a chain CA file, containing more CA authorities The command I run is: ope

Re: [openssl-users] Re: Special character in CA name

2011-12-15 Thread gkout
Hi Erwann, Putty is set to translate to UTF-8. Unfortunately I can not send this certificate. It was generated by another authority and sent to me, which means I can not re-try generating it again. One note: The file is a chain CA file, containing more CA authorities The command I run is: ope

Re: [openssl-users] Re: Special character in CA name

2011-12-15 Thread Erwann Abalea
Do you have an UTF8 capable terminal? Can you send the certificate you're testing? Le 15/12/2011 09:17, gkout a écrit : No joy... openssl x509 -text -noout -in blablabla.pem -nameopt -esc_msb outputs : ESPA%D1A -- Erwann ABALEA - ypéritorhinotachytrope: colérique, qui s'énerve rapidement

Re: Special character in CA name

2011-12-15 Thread gkout
Tried utf8, RFC2253, esc_msb but the output remains the same in all cases. Lou Picciano wrote: > > as I understand it, using the utf8 option should allow any characters you > might want. > Let us know how you get on; I've had trouble with this, too... > > Lou Picciano > > - Original Me

Re: [openssl-users] Re: Special character in CA name

2011-12-15 Thread gkout
No joy... openssl x509 -text -noout -in blablabla.pem -nameopt -esc_msb outputs : ESPA%D1A Erwann ABALEA wrote: > > Have you tried this: > > openssl x509 -text -noout -in blablabla.pem -nameopt -esc_msb > > Le 14/12/2011 19:16, Vladimir Puz a e'crit : >> I have the same problem, but with KO