RE: Setting startdate + enddate for root certificates?

Hi Olaf, *, Sorry if I'm replying to a month-old message; I haven't got time to read my mailing lists regularly, unfortunately. > I was just searching for a way to create root certificates > with specified startdate and enddate using openssl. The > "openssl ca" tool supports the according argumen

Re: Setting startdate + enddate for root certificates?

Jensen, J (Jens) wrote: > A solution is to create a request for the root, save it, then > use "req" to issue a temporary root. Then set up a mini-CA > to sign the real root with the temporary root. It works > because the keys are the same in the temporary and real > root (both generated from the

Re: [openssl-users] Requirements for valid CA certs within a cert chain

Erwann and Steve, Thanks for all the comments. Here're a new set of certs where I think that I've taken care of the points raised by both of you. I'd appreciate your review. This is the self-signed root CA cert. It is now V3, and has the AKI and SKI. It still has "Digital Signature", as I wa

RE(2): Re(2): Decryption Problem

I'm using openssl 0.9.7e on Unix (The example output below is from Windows version of openssl [a 0.9.7X derived binary version from stunnel.org], but is consistent with AIX version as regards the failure. I will repeat this tomorrow when I have access to the Unix box if that helps). openssl pkcs

test - ignore please

Test please ignore __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager [EMAIL PROT

Re: RE(2): Re(2): Decryption Problem

On Sun, Mar 06, 2005, Peter Cope wrote: > > I'm using openssl 0.9.7e on Unix (The example output below is from Windows > version of openssl [a 0.9.7X derived binary version from stunnel.org], but > is consistent with AIX version as regards the failure. I will repeat this > tomorrow when I have a