Re: CApath argument and Hash function

2000-01-27 Thread Dr Stephen Henson
Jeffrey Altman wrote: > > > Its a bit broken for several reasons... > > > > The script that normally creates these things "c_rehash" looks like it > > will only ever create hashes ending in zero. > > That can't be true: > > 11/05/99 3:15 1,314 23dbf167.0 > 12/09/99 0:54

Re: CApath argument and Hash function

2000-01-27 Thread Geoff Thorpe
Hi there, On Thu, 27 Jan 2000, Dr Stephen Henson wrote: [snip] > Its a bit broken for several reasons... [snip] > This method only works for lookup by subject name: any other kind of > lookup wont work. You could have multiple links but that would rapidly > get painful, particularly if you ha

Re: CApath argument and Hash function

2000-01-27 Thread Nicolas Roumiantzeff
>The ability to represent different certs >with the same hash value is vital if you adopt a strategy of 2 years >CA cert validity, 1 year active usage and overlapping validity. An other solution is to have slightly different CN values by including the year of validity in the name for example. N

Re: CApath argument and Hash function

2000-01-27 Thread Jeffrey Altman
> Its a bit broken for several reasons... > > The script that normally creates these things "c_rehash" looks like it > will only ever create hashes ending in zero. That can't be true: 11/05/99 3:15 1,314 23dbf167.0 12/09/99 0:54 4,306 37bb5c86.0 The .0 which is ap

Re: CApath argument and Hash function

2000-01-27 Thread Dr Stephen Henson
I'll clarify what I said a bit here. Yes it does use the hash of the DER encoding of the subject name. I've re-read my original response and I may have given the impression that it used a hash of the whole certificate. The actual hash is the first four bytes of the MD5 hash interpreted as a big

Re: CApath argument and Hash function

2000-01-27 Thread Arne Ansper
> Does GDBM work on Win32 and all the Unixen we support? In that case, > this should be perfectly possible. On VMS, we'll just use the > built-in ISAM (not really, but almost) file format... when you look at AnyDBM_File manpage of perl you will find following table:

Re: CApath argument and Hash function

2000-01-27 Thread Richard Levitte - VMS Whacker
From: Dr Stephen Henson <[EMAIL PROTECTED]> drh> something better that handles multiple lookups. E.g. an index file which drh> will work on all platforms and GDBM on platforms that support it. Not in drh> 0.9.5 though... Does GDBM work on Win32 and all the Unixen we support? In that case, this

Re: CApath argument and Hash function

2000-01-27 Thread Erwann ABALEA
On Thu, 27 Jan 2000, Dr Stephen Henson wrote: > Richard Levitte - VMS Whacker wrote: > > > > amoskoff> After reading the archive and modssl FAQ I have almost everything >working. > > amoskoff> But there is one question. I order to use the CApath in the function > > amoskoff> ``SSL_CTX_load_veri

Re: CApath argument and Hash function

2000-01-27 Thread Holger Reif
Dr Stephen Henson schrieb: > > Richard Levitte - VMS Whacker wrote: > > > > amoskoff> After reading the archive and modssl FAQ I have almost everything >working. > > amoskoff> But there is one question. I order to use the CApath in the function > > amoskoff> ``SSL_CTX_load_verify_locations'' you