Re: Verifying self-signed certificate

2013-11-15 Thread Martin Hecht
Hi Manoj, if you want to generate just one selfsigned certificate, this would be the easiest: # generate key and self signed cert with one command openssl req -x509 -nodes -days 3650 \ -subj '/C=DE/ST=some-state/L=somewhere/CN=example.com' \ -newkey rsa:1024 -keyout key.pem -out cert.pem # ver

Re: Verifying self-signed certificate

2013-11-15 Thread Manoj
Hi, Can you post the complete command to generate the self signed certificate , the case where the verification worked for you? Thanks -- View this message in context: http://openssl.6102.n7.nabble.com/Verifying-self-signed-certificate-tp18922p47362.html Sent from the OpenSSL - User mailing l

Re: Verifying self-signed certificate

2010-11-30 Thread iruvopenssl
On Tue, 30 Nov 2010 01:36:16 +0200 "Dr. Stephen Henson" wrote: >On Tue, Nov 30, 2010, iruvopen...@hushmail.com wrote: > >> On Mon, 29 Nov 2010 20:05:43 +0200 "Dr. Stephen Henson" >> wrote: >> Greetings! >> >> I'm doing nothing funky: >> $ openssl genrsa -des3 -out ca.key 4096 >> $ openssl re

Re: Verifying self-signed certificate

2010-11-30 Thread aerowolf
On Mon, Nov 29, 2010 at 3:36 PM, Dr. Stephen Henson wrote: If there were any extensions in the server certificate that wouldn't happen but the command you create the server certificate with doesn't include any and ends up creating the deprecated V1 certificate format. Should this behavior b

Re: Verifying self-signed certificate

2010-11-29 Thread Dr. Stephen Henson
On Tue, Nov 30, 2010, iruvopen...@hushmail.com wrote: > On Mon, 29 Nov 2010 20:05:43 +0200 "Dr. Stephen Henson" > wrote: > Greetings! > > I'm doing nothing funky: > $ openssl genrsa -des3 -out ca.key 4096 > $ openssl req -new -x509 -days 365 -key ca.key -out ca.crt > $ openssl genrsa -des3 -out

Re: Verifying self-signed certificate

2010-11-29 Thread iruvopenssl
On Mon, 29 Nov 2010 20:05:43 +0200 "Dr. Stephen Henson" wrote: >On Mon, Nov 29, 2010, iruvopen...@hushmail.com wrote: > >> Greetings, >> >> I guess this question must have been asked quite a lot over >here, >> but I couldn't find any traces of it >> so I guess I'll repeat it. >> >> I can't se

Re: Verifying self-signed certificate

2010-11-29 Thread Dr. Stephen Henson
On Mon, Nov 29, 2010, iruvopen...@hushmail.com wrote: > Greetings, > > I guess this question must have been asked quite a lot over here, > but I couldn't find any traces of it > so I guess I'll repeat it. > > I can't seem to be able to verify (using 'openssl verify') - > without openssl spitti