Ciphers in X509 certificate

Can anybody help me in steps in creating a certificate with the cipher RSA_3DES_EDE_CBC_SHA.. View this message in context: Ciphers in X509 certificate Sent from the OpenSSL - User forum at Nabble.com.

Re: RAND_Load_File using /dev/random

It depends upon how secure you need to be and your threat model. Likely, 128 bytes is more than enough. If security is not critical and you're just experimenting, switching to '/dev/urandom' should be fine. Yes i have done this.. If you have control over the systems your

change key after EVP_Encrypt_init(...,key,..)

Hi, char[] key = abcde; EVP_Encrypt_init(...,key,..) key = cdefg Will I have to recall EVP_Encrypt_Init? Thanks, Felix __ OpenSSL Project http://www.openssl.org User Support Mailing List

RE: how to install MOD_SSL on Windows2003 server .. plz help!

I still cant install my mod_ssl .. IF anyone exists to install MOD_SSL on windows2003 server , plz let me know how it will be done ... I think there should be a shell $ to install mod_ssl on win2003 server .. Plz help me find that shell .. or other solution for this problem thanks

Re: Ciphers in X509 certificate

Can anybody help me in steps in creating a certificate with the cipher RSA_3DES_EDE_CBC_SHA hi, You can find documentation about certificate creation in the following link.. http://www.openssl.org/docs/HOWTO/certificates.txt hope this helps, Samy

Signing Certificate corrupts Subject Name using name_opt or cert_opt

Hi, I've got a certificate request with the the subjectname cn=database,cn=OracleContext,dc=st-andrews,dc=ac,dc=uk I've signed one of these previously with openssl after adding domainComponent= optional to the openssl.cnf file under policy_anything. However, since installing a new

Re: Signing Certificate corrupts Subject Name using name_opt or cert_opt

On Wed, Jan 18, 2006, Duncan Brannen wrote: Hi, I've got a certificate request with the the subjectname cn=database,cn=OracleContext,dc=st-andrews,dc=ac,dc=uk I've signed one of these previously with openssl after adding domainComponent= optional to the openssl.cnf file

Re: Ciphers in X509 certificate

On Tue, Jan 17, 2006, am0ykam0te (sent by Nabble.com) wrote: Can anybody help me in steps in creating a certificate with the cipher RSA_3DES_EDE_CBC_SHA.. No because your question doesn't make sense. That algorithm is an SSL/TLS cipher which doesn't have much to do with certificates. The

Re: Signing Certificate corrupts Subject Name using name_opt or cert_opt

Dr. Stephen Henson wrote: On Wed, Jan 18, 2006, Duncan Brannen wrote: Hi, I've got a certificate request with the the subjectname cn=database,cn=OracleContext,dc=st-andrews,dc=ac,dc=uk I've signed one of these previously with openssl after adding domainComponent= optional to the

Solved: Signing Certificate corrupts Subject Name using name_opt or cert_opt

It seems the old CA.pl file used -preserveDN when signing a certificate, adding this created a certificate with the correct subject whether name_opt and cert_opt are commented out or not # openssl x509 -subject -in test.name_opt.preserveDN.crt -noout subject=

Re: x509 CRL v2

Dr. Stephen Henson wrote: On Tue, Jan 17, 2006, Daniel Garca Franco wrote: I would like to use other CRL Revoke Reason as superseded, unspecified, etc... with the CRL Entry Extension InvalidityDate, not that the use of CRL Entry Extension InvelidityDate force to set the CRL Revoke

How to build openssl for Mac-Intel computers

Hi everybody, we have a new platform - Macs with Intel processors. Is there a chance to build a static library (i386 code) for linking in Xcode 2.2? A static library with ppc code has been done already. I'd like to end up with a Universal Binary of my code. Thanks a lot for any ideas!

Private Key and request in same file

hi all.. 'CA.pl -newreq' puts the 'private key' and the 'request' in the same file. Is there a way to put seperately? During a discussion a week bac, Steve mentioned that new CA.pl script will put the private key seperately. my version is 0.9.7g. do i need to update? Thanks in advance, Samy

Re: How to build openssl for Mac-Intel computers

Jörg Eyring wrote: Hi everybody, we have a new platform - Macs with Intel processors. Is there a chance to build a static library (i386 code) for linking in Xcode 2.2? A static library with ppc code has been done already. I'd like to end up with a Universal Binary of my code. For fun;

Re: How to build openssl for Mac-Intel computers

Hi William, thanks for your hint. I'd give it a try, but I must admit that I'm neither a Configure- nor a Perl-Guru :'( A short description where to change the appropriate setting(s) would be helpful. Maybe someone has already done it? Jörg Hi everybody, we have a new platform - Macs

Re: Ciphers in X509 certificate

i see.. we just updated our current OpenSSL and added this cipher and whenever we try to establish a connection it keeps on using other ciphers.. how can i test this cipher? View this message in context: Re: Ciphers in X509 certificate Sent from the OpenSSL - User forum at Nabble.com.

Re: Ciphers in X509 certificate

On Wed, Jan 18, 2006, am0ykam0te (sent by Nabble.com) wrote: i see.. we just updated our current OpenSSL and added this cipher and whenever we try to establish a connection it keeps on using other ciphers.. how can i test this cipher? Well one way is to set the server cipher list so it

Re: I had a hard time setting up a CA / enhancment request for openssl.cnf

On Thu, Jan 19, 2006, Ray wrote: So my enhancment request is to find a way that the command perl CA.pl -newca uses the section [ v3_ca ] automatically. Sorry about that. It is a bug that is fixed in the latest snapshots but not yet in an official release. Steve. -- Dr Stephen N.