Re: extended validation certificates

2009-10-30 Thread EV SSL
Jakob Grießmann wrote: > > Hello, > > does anyone have a howto on how to generate a self-signed extended > validation certificate, or on how to set-up my own CA for local use > that gives out EVN certificates? > > I know how to do this for normal certificates, but was unable to find > more det

Re: extended validation certificates

2008-08-30 Thread Jakob Grießmann
Hi Patrick, > However, it should get you at least started. thanks a lot, that helps me out! Jakob __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-use

Re: extended validation certificates

2008-08-28 Thread Patrick Patterson
On August 28, 2008 01:54:50 pm Jakob Grießmann wrote: > Hi, > > > It is likely that the documentation will also describe what extensions > > must be included to mark an end-entity certificate as EV. I don't > > know the details. > > okay, I will dig deeper there. :-) Thanks! > > Does anyone has an

Re: extended validation certificates

2008-08-28 Thread Jakob Grießmann
Hi, > It is likely that the documentation will also describe what extensions > must be included to mark an end-entity certificate as EV. I don't > know the details. okay, I will dig deeper there. :-) Thanks! Does anyone has an instruction on how to generate a certificate with the needed OIDs? W

Re: extended validation certificates

2008-08-27 Thread Kyle Hamilton
From what I'm told, Mozilla Firefox must be built with a special build-time option to allow an external text file to contain admin-approved EV roots. There is no specific OID for a policy extension used to identify EV. I honestly don't know how one would make it; there was a related discussion on

Re: extended validation certificates

2008-08-27 Thread Jakob Grießmann
Hi, basically, I want to play around with EVN for documentation and development purposes, and the only way of getting a "cheap" certificate is creating one on my own... so a pointer would be welcome. Thanks Jakob __ OpenSSL Proje

RE: extended validation certificates

2008-08-25 Thread David Schwartz
> thanks for the fast replies! When you want to make your own non-EV CA > recognized by the browser, it's easy, you just have to import your CA > as trusted root, then it works. Isn't there a similar way for EV CAs, > like producing your EV CA and simply adding it to the trusted root of > the brow

Re: extended validation certificates

2008-08-25 Thread Patrick Patterson
On August 25, 2008 11:38:36 am Jakob Grießmann wrote: > Hi there, > > thanks for the fast replies! When you want to make your own non-EV CA > recognized by the browser, it's easy, you just have to import your CA > as trusted root, then it works. Isn't there a similar way for EV CAs, > like producin

Re: extended validation certificates

2008-08-25 Thread Jakob Grießmann
Hi there, thanks for the fast replies! When you want to make your own non-EV CA recognized by the browser, it's easy, you just have to import your CA as trusted root, then it works. Isn't there a similar way for EV CAs, like producing your EV CA and simply adding it to the trusted root of the brow

Re: extended validation certificates

2008-08-25 Thread Mark H. Wood
Well, it sounds like there *is* another, more legally correct way: set up your own CA (easy!) and do what it takes to get it certified by the CA/Browser Forum (should be difficult). Then you'd legally have the privilege of coining the cert.s that you want. I seriously doubt that issuance of self-

Re: extended validation certificates

2008-08-25 Thread Patrick Patterson
Hello Jakob On Monday 25 August 2008 08:51:42 Jakob Grießmann wrote: > Hello, > > does anyone have a howto on how to generate a self-signed extended > validation certificate, or on how to set-up my own CA for local use > that gives out EVN certificates? > > I know how to do this for normal certifi