Re: SubjectAltName in a wildcard certificate - is this possible?

2012-05-15 Thread Andy GOKTAS
I was just trying to find out where it may be documented with why wildcards are not allowed in SubjectAltNames for certificates - if this is the case of course. Thanks, Andy Goktas >>> Hanno Böck 5/12/2012 5:26 AM >>> On Fri, 11 May 2012 12:21:10 -0700 "Andy GOKTAS"

SubjectAltName in a wildcard certificate - is this possible?

2012-05-12 Thread Andy GOKTAS
m able to read about this? Thanks, Andy Goktas __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated Lis

subjectAltName requirements

2012-04-04 Thread Andy GOKTAS
will experience issues. Is this true? If so, why? Thanks, Andy Goktas __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated

Retrieve basic information from an existing certificate already in place

2010-12-22 Thread Andy GOKTAS
Hello, I'm looking into the openSSL command/syntax to be used in order to retrieve information on a certificate via it's URL. Anyone have a good example to accomplish this? All that needs to happen is to Display information on a cert (via Windows command line, but that shouldn't matter). S

Re: Duplicate serial number

2010-09-23 Thread Andy GOKTAS
log to the serial.srl file that's updated each time it's used? In short, a list of cert name (=CN perhaps) and serial number associated with it. ?? Thanks, Andy Goktas >>> 9/19/2010 1:53 PM >>> If you generate multiple certs with the same serial number, Firefox (and an

Re: Duplicate serial number

2010-09-23 Thread Andy GOKTAS
Great! Thanks for that information Patrick. :) Thanks, Andy Goktas >>> Patrick Patterson 9/17/2010 6:11 AM >>> Hi Andy: Well, aside from violating most of the standards around PKI, the main problem you will have is revocation - the way you revoke a certificate is to put i

Duplicate serial number

2010-09-17 Thread Andy GOKTAS
Is it merely a method of basic tracking on how many certificates a CA signs? Thanks, Andy Goktas __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-

Re: Fwd: Microsoft RSA SChannel Cryptographic Provider - DoesopenSSL support?

2010-09-08 Thread Andy GOKTAS
r.p12 -CSP 'Microsoft RSA SChannel Cryptographic Provider' And is this particular arg used when generating a pkcs12 only? ?? Thanks! >>> "Dr. Stephen Henson" 9/5/2010 9:48 AM >>> On Fri, Sep 03, 2010, Andy GOKTAS wrote: > Hello, > > I'm using ope

Fwd: Microsoft RSA SChannel Cryptographic Provider - Does openSSL support?

2010-09-08 Thread Andy GOKTAS
Hello, I'm using openSSL 1.0.0a to generate certificates for our Microsoft Windows environment - LDAP over SSL required on Domain Controllers. You'll notice here: http://support.microsoft.com/kb/321051 that the following is required: "You must use the Schannel cryptographic service provide

Fwd: Microsoft RSA SChannel Cryptographic Provider - Does openSSL support?

2010-09-05 Thread Andy GOKTAS
Hello, I'm using openSSL 1.0.0a to generate certificates for our Microsoft Windows environment - LDAP over SSL required on Domain Controllers. You'll notice here: http://support.microsoft.com/kb/321051 that the following is required: "You must use the Schannel cryptographic service provide

Need help with signing a csr with a openssl generated CA.

2010-08-29 Thread Andy GOKTAS
Hello, We're trying to generate self signed certs and don't seem to keep the attributes after a csr is signed by a self generated CA via openssl (i.e.: OIDs specified in openssl.cfg drop off the server cert after signed, thus creating a V1 cert). Here is an example of the syntax I'm using:

Need help with signing a csr with a openssl generated CA.

2010-08-29 Thread Andy GOKTAS
We're trying to generate self signed certs and don't seem to keep the attributes after a csr is signed by a self generated CA via openssl (i.e.: OIDs specified in openssl.cfg drop off the server cert after signed, thus creating a V1 cert). Here is an example of the syntax I'm using: Generat