It is like an x509 cert in that it has some plain text along with other
non-readable stuff...
I have tried asn1parse (with various offsets used) and I get some
readable stuff...
The file contains stuff relating to an x509 cert that I need to override
What exactly is it???
Thanks in adva
CRL days is probaly 30 in the .cnf file.
Jagannadha Bhattu Gosukonda wrote:
My openssl.cnf file has the following entry:
default_days = 365
But when I create a root CA and sign a certificate for a sample server
with it then the 'Not After' is set to exactly 30 days from 'Not
Before' date. I ha
Why will a ca generated in openssl result in an authentication error if
this root cert is installed on a phone? I am using the root cert to
validate a java signed "midlet" for a phone...
The phone does not use any other certs to validate my cert and it does
not access the web to validate a cer
Hi,
How do I create a x509 v3 ca cert that has the standard ANY permission?
The openssl.cnf will create a cert that works with a computer but not a
phone.
I need to create a ca cert that will validate a java midlet for a phone.
I have sorted out many of the issues with installing the cert to
make them work).
The commands are fairly similar, just create a .bat file with those
commands and things should work.
David Templar wrote:
I think I can help you with PC certs - I am having trouble with phone
certs though :(
openssl genrsa -out ca.key 1024 (or whatever size key you want) you
I think I can help you with PC certs - I am having trouble with phone
certs though :(
openssl genrsa -out ca.key 1024 (or whatever size key you want) you can
also chose dsa or dsa1 etc
and
openssl req -new -x509 -key ca.key -out cacert.pem -config [the name of
the config file] - you can als
e my certs (if I have 1 old cert on the phone) but it considers
it as part of the old cert - with its expiry date etc?
David Templar wrote:
Ignore my last post - I forgot the extra 0s are the hhdd etc...
But I am having a problem - I have deleted all files on my phone, but
I cannot get it to
Ignore my last post - I forgot the extra 0s are the hhdd etc...
But I am having a problem - I have deleted all files on my phone, but I
cannot get it to accept my certificates. If I add just one of the old
certificates and then mine, it will be "recognized" - but only as part
of the old one (
Thanks.
David Schwartz wrote:
I am having a lot of problems importing a certificate made in openssl
into a phone, but I can get a keytool certificate imported. The only
thing is that I need to change the V1 cert (keytool only makes V1) to a
V3 cert - can openssl modify a cert to a V3 (without c
This is a follow on from my last post as the text lost its formatting.
How do I change the utc time of a certificate to a smaller format
(whilst creating a cert):
18082107Z - there are lots of zeros in this format, openssl gives less.
Also, how do I add a friendly name object - I have trie
Hi,
I am still stuck on the phone cert creation, but I am inching closer!
How do I generate a cert with only the below data to be included in the
certs? What should be openssl.cnf have? What should be my genrsa be? and
do I need to do anything else? I have attached the asn1parse output of
the
I am having a lot of problems importing a certificate made in openssl
into a phone, but I can get a keytool certificate imported. The only
thing is that I need to change the V1 cert (keytool only makes V1) to a
V3 cert - can openssl modify a cert to a V3 (without changing anything
else)?
_
Hi,
I have attached 2 certificates (I have changed the extension to .txt as
the openssl forum does not accept .cer). The microsoft.txt is exported
from the browser and the david.txt is created by openssl and also
exported from the browser (IE).
The microsoft cert I can install on my motorola
. I have changed the
extension of the attached cert to .txt as the openssl forum does not
accept .crt.
Thanks for your great tip! I am now 90% there!
RGDS,
David
Dr. Stephen Henson wrote:
On Tue, Jul 12, 2005, David Templar wrote:
Hi all,
I am really stuck and have tried all I can - I
Thanks, I will try this within the next hour to see what happens. Is
there a key size or any other issues that I need to consider when I
generate a new cert now?
Dr. Stephen Henson wrote:
On Tue, Jul 12, 2005, David Templar wrote:
Hi all,
I am really stuck and have tried all I can - I
orum or to anybody
who
knows flex operating system (the one from Motorola).
Daniel
Díaz
[EMAIL PROTECTED]
De:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] En
nombre de David Templar
Enviado el: martes, 12
de julio de
2005 20:01
Para:
openssl-users@openssl.org
Asunto
ssage -
From: "David Templar" <[EMAIL PROTECTED]>
To:
Sent: Tuesday, July 12, 2005 5:49 PM
Subject: 3rd time request... PLEASE help! Phone cert creation
Hi all,
I am really stuck and have tried all I can - I really need your help to
generate a software publishing cer
Hi all,
I am really stuck and have tried all I can - I really need your help to
generate a software publishing certificate and its root cert to install
on motorola phones.
I am enclosing a copy of an already existing cert on the phone. It
appears to be a V4 x509 cert - I could be wrong thoug
Hi all,
I am really stuck and have tried all I can - I really need your help to
generate a software publishing certificate and its root cert to install
on motorola phones.
I am enclosing a copy of an already existing cert on the phone. It
appears to be a V4 x509 cert - I could be wrong thoug
Hi all,
Please help me! I am trying to work out the format of this certificate
and then make my own certificates like it. It is a root certificate for
verification of signed java midlets on a moblile phone (Motorola).
All help appreciated. I need to know the type, format and how to make my
o
remove
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
REMOVE
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
I have been using openssl and its cert creation tools for a long time
now - on either NT or Windows 2000.
However, I have tried to copy my openssl directroy which has all the
files to a Windows ME computer and I have problems - I can create the ca
and personal cert but when I want to sign the
23 matches
Mail list logo
