Re: How to load a chain of certificates ?

2008-06-09 Thread delcour.pierre
Hello, Ariel Salomon wrote: Hi Pierre, If you are using this certificate chain for an SSL connection, use SSL_CTX_use_certificate_chain_file which does precisely what you are asking. If you are just looking for a way to load this chain for other uses, the source code for that function

RE: ldaps client and oracle internet directory

2008-06-09 Thread Michael Gaab
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] snipped With the following error, what are the things that I need to check? Thanks Mike openssl s_client -CAfile /etc/openldap/cacerts/ca-cert.crt -connect xxx:636 CONNECTED(0003)

Re: how to add an extension to a X509 certificate ?

2008-06-09 Thread delcour.pierre
Dr. Stephen Henson wrote: On Fri, Jun 06, 2008, delcour.pierre wrote: Hello everyone, I have a different problem now. I want to add a X509v3 Authority Key Identifier field in a x509v3 certificate. This field must have these three parts : - keyid (the keyid of the issuer) - dirname (the

Re: How to load a chain of certificates ?

2008-06-09 Thread delcour.pierre
Hello, Ariel Salomon wrote: Hi Pierre, If you are using this certificate chain for an SSL connection, use SSL_CTX_use_certificate_chain_file which does precisely what you are asking. If you are just looking for a way to load this chain for other uses, the source code for that function

RE: ldaps client and oracle internet directory

2008-06-09 Thread Marek . Marcola
Hello, [EMAIL PROTECTED] wrote on 06/06/2008 06:25:38 PM: From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] snipped With the following error, what are the things that I need to check? Thanks Mike openssl s_client -CAfile

Max length of company field

2008-06-09 Thread Florian Lindner
Hallo, I want to create a Certificate Signing Request (CSR) with Debian etch openssl. openssl req -new -nodes -keyout cc.key -out cc.csr But my company name seems to be a bit too long., Organization Name (eg, company) [Internet Widgits Pty Ltd]:long Name problems making Certificate Request

Re: Max length of company field

2008-06-09 Thread Kyle Hamilton
It is in your openssl.conf. It should be OrganizationName_max = 64, if I remember correctly. Just raise that number. -Kyle H On Mon, Jun 9, 2008 at 4:55 AM, Florian Lindner [EMAIL PROTECTED] wrote: Hallo, I want to create a Certificate Signing Request (CSR) with Debian etch openssl.

Max length of company field

2008-06-09 Thread Florian Lindner
Hallo, I want to create a Certificate Signing Request (CSR) with Debian etch openssl. openssl req -new -nodes -keyout cc.key -out cc.csr But my company name seems to be a bit too long., Organization Name (eg, company) [Internet Widgits Pty Ltd]:long Name problems making Certificate Request

Re: Max length of company field

2008-06-09 Thread Chris Clark
I tried this here, and it accepted the Organization Name that you provided long Name problems making Certificate Request without any errors. As you can see, this name is only 45 characters long, and the maxsize is 64 characters. -Chris On 6/9/08, Florian Lindner [EMAIL PROTECTED] wrote:

Re: Max length of company field

2008-06-09 Thread Florian Lindner
No, the name long Name was only a placeholder. problems making Certificate Request was the error message from openSSL. The real name is GIMIK Systeme - Gesellschaft für innovative Marketing- Kommunikationssysteme mbH which is 82 characters long. Is there a way to work around the 64 char

Re: Max length of company field

2008-06-09 Thread Kyle Hamilton
Look for OrganizationName_max = 64 in your openssl.conf. Raise this as necessary. -Kyle H On Mon, Jun 9, 2008 at 9:43 AM, Florian Lindner [EMAIL PROTECTED] wrote: No, the name long Name was only a placeholder. problems making Certificate Request was the error message from openSSL. The real

Re: Max length of company field

2008-06-09 Thread Dr. Stephen Henson
On Mon, Jun 09, 2008, Florian Lindner wrote: No, the name long Name was only a placeholder. problems making Certificate Request was the error message from openSSL. The real name is GIMIK Systeme - Gesellschaft für innovative Marketing- Kommunikationssysteme mbH which is 82 characters

Trouble cross-compiling for linux-ppc

2008-06-09 Thread Dallas Clement
Hi All, I'm having a bit of a problem getting the openssl-0.9.8h Configure script to use my cross-compiler. These are the arguments I'm giving Configure: ./Configure no-krb5 zlib-dynamic shared threads linux-ppc I can see from examining the Configure script that the compiler is defined as gcc