Re: How to create a certificate silently

On Fri, Sep 03, 2004 at 12:51:02PM -0400, Lule Chen wrote: > Thanks, but I am new to openssl. Could you give me a little bit more detail > of the usage? There is a good article in Septembers SysAdmin mag (if you can obtain a copy) about using "expect" to automate openssl operations. http://www.sam

Re: How to create a certificate silently

On Fri, Sep 03, 2004 at 11:19:37AM -0400, Lule Chen wrote: > Hi, I use the openssl to create a self signed certificate, but it needs > interactively input country name, province name, ... Common name. I am > wondering if there is a way to do it silently, i.e. let it read those > response from a con

Re: Scanning for Certificate Expiration

Patrick Heim wrote: Does anoyne know of a tool or a way to script OpenSSL to: 1. Connect to an SSL enabled server 2. Retrieve the server certificate 3. Parse it for the certificate expiration date It is easy to setup nagios to give N-days advance notice of expiring certs. I put this in checkcomm

Re: Possible problem with 'openssl pkcs12'

ohaya wrote: Hi, I'm trying to setup Tomcat as a standalone web server with SSL client and server authentication, and I'm generally following the procedure at: [snip] Beyond that, is my assumption that the "openssl pkcs12" should have caused the CA cert to be included in the keystore correct? Or,

Re: No certificate corresponds to SSL cipher suides

Liam Escario wrote: "java.net.SocketException: SSL handshake errorjavax.net.ssl.SSLException: No available certificate corresponds to the SSL cipher suites which are enabled." Strangely enough, if I FIRST create a self-signed entry in my keystore before i import my CA signed-certificate, it wor

Re: New to OpenSSL-Need a little help

Kevin Eppinger wrote: I have been tasked with a project that involves writing a process (not a CGI invoked from Apache) that sends a secure request to a https website and reads the response back, parses it..blah, blah, blah. Its has to be Consider... LWP::Request part of the libwww perl module.

ASN.1 overflows

http://www.us-cert.gov/cas/techalerts/TA04-041A.html Does this affect openssl running on Window'splatforms? -- Some days it's just not worth chewing through the restraints... Mark Foster <[EMAIL PROTECTED]> http:

Re: revoking expired certificates

ing through the restraints... Mark Foster <[EMAIL PROTECTED]> http://mark.foster.cc/ pgp0.pgp Description: PGP signature

Re: Keep CRLs up-to-date

Arne Jørgensen wrote: Maybe I will finish my code and publish it. Yes, please do! -- => Somedays it's just not worth chewing through the restraints... => Mark Foster <[EMAIL PROTECTED]> http://mark.foster.cc/ _

Re: Apache with OpenSSL - WebSphere

ust requirements, and you get a "prompt" you can type in (emulate) an HTTP session... for instance, typing GET / HTTP/1.0 will simulate what a web browser would do. -- => Mark Foster <[EMAIL PROTECTED]> http://mark.foster.cc/ __

Re: 0.9.7c Vulnerability??

100% 156.74 KB/s 20:41:50 (71.51 KB/s) - `telnetd' saved [170613/170613] -- => Mark Foster <[EMAIL PROTECTED]> http://mark.foster.cc/ __ OpenSSL Project http://www.openssl.

Re: Encrypted E-mail

your computer and the web-mail server is encrypted. It says nothing about what is happening behind that - there is a reasonable chance the data stream between the web-mail server and the IMAP or POP3 server is not encrypted. -- => Mark Foster <[EMAIL PROTECTED]> http://mark.

Re: Apache see cert as CA

unset) #SSLCACertificateFile (unset) -- Some days it's just not worth chewing through the restraints... Mark Foster <[EMAIL PROTECTED]> http://mark.foster.cc/ __ OpenSSL Project http://www.op

Re: Trouble Importing CAcertificate

arate from the get go, with distinct CSRs and such. Of course that means separate certificates as well. good luck. -- Some days it's just not worth chewing through the restraints... Mark Foster <[EMAIL PROTECTED]> http://mark.foster.cc/ _