[PATCH] openssl s_client starttls ldap

Hi everyone, I stumbled over a missing feature of the openssl s_client tool. I wanted to check a LDAP TLS connection over the cli, but the ldap starttls option was not implemented (yet). So I took the chance to write a patch. #> openssl s_client -starttls ldap -connect localhost:389 Comments

Re: OCSP responder bug?

Hi Tim, it's quite a while that you've posted this message, but I just ran into the same problem. There is a different behavior between openssl versions like 0.9.8n and 1.0.0c listen on the hosts IP addresses. This is exactly what you have evaluated with your commands. #> openssl ocsp -por

Re: [openssl-users] CA

Hi Erwann! On 05/19/2011 10:20 AM, Erwann ABALEA wrote: "old" end-user certificates can only be verified by the "old" CA certificate, of course (in case the CA is "renewed", with its key changed, etc). I didn't "renew" the CA certificate, I've used the existing private key to create thr new o

Re: [openssl-users] CA

Hi Erwann! On 05/19/2011 10:20 AM, Erwann ABALEA wrote: "old" end-user certificates can only be verified by the "old" CA certificate, of course (in case the CA is "renewed", with its key changed, etc). I didn't "renew" the CA certificate, I've used the existing private key to create thr new

Re: [openssl-users] CA

On 05/18/2011 11:17 AM, Erwann ABALEA wrote: Bonjour, Hodie XV Kal. Iun. MMXI, Jean-Ann GUEGAN scripsit: Hi ! It’s possible to renew a Certificate Autority or extend the date validity ? These 2 options are possible. "Recertify" (i.e. sign the same certificate, but change the ser