Re: [openssl-users] RE: Creating Extended Validation SSL Certificates

2010-09-27 Thread Erwann ABALEA
Bonjour, Hodie V Kal. Oct. MMX, Gumbie scripsit: > I apologize to all for not looking into this more, before asking. > It isn't just a matter of adding the proper extensions. The > various browser software actually has the corporate policy OID > hard coded into the browser code. At first g

RE: Creating Extended Validation SSL Certificates

2010-09-26 Thread Gumbie
- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of David Schwartz Sent: Thursday, September 23, 2010 7:56 PM To: openssl-users@openssl.org Subject: Re: Creating Extended Validation SSL Certificates On 9/23/2010 7:16 AM, Gumbie wrote: >Can someo

Re: Creating Extended Validation SSL Certificates

2010-09-23 Thread David Schwartz
On 9/23/2010 7:16 AM, Gumbie wrote: Can someone explain what is needed to create and EV (Extended Validation) Certificate? I have been trying to research this and have found limited information on this. Only one document that was of any help -àhttp://www.cabforum.org/EV_Certificate_Guidelines.

Re: Creating Extended Validation SSL Certificates

2010-09-23 Thread Patrick Patterson
Hey there: Well, the first thing to do to be able to issue EV certs and have them recognised by the various browsers is to build a CA and issuance regime that will pass an audit according to the rules from the CABrowser folks, do a proper key ceremony, and then have that audit. And then, wait