Avoid large memory consumption when using pkcs7_sign

2006-12-27 Thread Hagai Yaffe
Hello, I am using PKCS7_sign for applying Digital Signature to files, when I am creating an enveloped PKCS#7 file that contains also the signed file content all the signed file data is being loaded to memory (this would be a problem with large files), I know that I can use the DEACHED option to

OpenSSL with Windows subordinates

2006-12-27 Thread Aaron Barnes
I have an OpenSSL CA running on a BSD 6.1 machine as the root, and am trying to have that act as the parent to subordinate Windows online enterprise CAs. The installation went fine. I signed the Windows subordinate CA cert request with SSL, then converted it to pkcs12 to be installed. That's

Re: OpenSSL with Windows subordinates

2006-12-27 Thread Dr. Stephen Henson
On Wed, Dec 27, 2006, Aaron Barnes wrote: > I have an OpenSSL CA running on a BSD 6.1 machine as the root, and am > trying to have that act as the parent to subordinate Windows online > enterprise CAs. > > > The installation went fine. I signed the Windows subordinate CA cert > request with

RE: OpenSSL with Windows subordinates

2006-12-27 Thread Aaron Barnes
With Windows certificate services, upon installation it will ask you to select the type of CA the server is to become from 4 different options. I've chosen an enterprise online CA, however its parent is offline, so of course I cannot make an online certificate request. I saved the actual certifica

Re: OpenSSL with Windows subordinates

2006-12-27 Thread Dr. Stephen Henson
On Wed, Dec 27, 2006, Aaron Barnes wrote: > With Windows certificate services, upon installation it will ask you to > select the type of CA the server is to become from 4 different options. > I've chosen an enterprise online CA, however its parent is offline, so > of course I cannot make an online