Re: combining cert file and private key file subjectAltName using my own CA

2013-10-05 Thread Dave Mitchell
On Fri, Oct 04, 2013 at 10:05:08PM -0400, Dave Thompson wrote: > > 1) is this a reasonable thing to do? > > Yes. Ok thanks. That's reassuring. > You don't say why you chose to generate keys centrally. In case you didn't > know, even with your own CA you *can* still use the conventional process

RE: Documentation pointers

2013-10-05 Thread Mike.
On 10/4/2013 at 9:52 PM Dave Thompson wrote: |> From: owner-openssl-us...@openssl.org On Behalf Of Mike. |> Sent: Friday, October 04, 2013 16:28 | |> I have just started to learn OpenSSL, and I am having troubles |> finding documentation that is helpful. |> |> www.openssl.org seems to have lots o

RE: combining cert file and private key file subjectAltName using my own CA

2013-10-05 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Dave Mitchell > Sent: Friday, October 04, 2013 17:59 > I'm writing an openssl-based app that uses client and sever certs, > generated using a private root CA. Each client has its own cert and > private key. > > For ease of deployment, I'm combi

RE: Documentation pointers

2013-10-05 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Mike. > Sent: Friday, October 04, 2013 16:28 > I have just started to learn OpenSSL, and I am having troubles > finding documentation that is helpful. > > www.openssl.org seems to have lots of reference documentation, but > not too much in usag

RE: Strange behaviour: chain with AIA fails in Firefox

2013-10-05 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Walter H. > Sent: Friday, October 04, 2013 15:30 > there exists a self signed root CA certificate (A) > one intermediate CA certificate (B) > and this intermedia certificate has signed a SSL certificate (C) of a > web server; > [and C and B have