Issuer incorrectly copied into cert ?

2000-09-06 Thread Darren Reed
ite an openssl.cnf file ? To my mind, the current behaviour (if intended) is at least not obvious in its intent from the configuration file or (at worst?) bringing in the wrong information. Or am I missing something obvious here ? Thanks, Darren -- Darren Reed

OpenSSL Performance stats.

2000-08-18 Thread Darren Reed
Hi, Has anyone done any performance measuring of OpenSSL and published it on the WWW ? I'm not particularly fussed about hardware (that can be factored in). I'm interested in measurements of kB/sec encryption and connections/sec setup/accept for 3DES+MD5. Darren ___

Re: diffs for X509 default paths

2000-07-25 Thread Darren Reed
Richard Levitte - VMS Whacker wrote: > > From: [EMAIL PROTECTED] (Darren Reed) > > darrenr> It strikes me as somewhat peculiar that there is little support for > darrenr> environment variables with the various libraries, in particular to > darrenr> support debugging.

Importing Site Certificates into Netscape

2000-07-24 Thread Darren Reed
Whilst investigating what can be done with X-509 certificates, it occurred to me that maybe having separate, role-based, signing certificates for the likes of E-Mail/SSL. So I went ahead, created my root (no problems), made another certificate that was not a CA (but sign-only) and signed that wi

IE5 and CRL distribution points.

2000-07-17 Thread Darren Reed
TO try and keep IE all nice and happy, I've included CRL URL's in some certs I'm generating. For fun (NOT!) I've used different extensions in the CA cert and the "user" cert: CA: X509v3 extensions: X509v3 CRL Distribution Points: URI:http://www/myca.crl Use