How to create windows cert !?

2009-04-16 Thread shawnlau
Hi All! I just want to know how to create a certificate for windows xp , For I tried a lot of time, there always some error that makes me unknown where the mistake was made by me! Is there some instance? Thank you ! Shawn!

re: re: How to create windows cert !?

2009-04-16 Thread shawnlau
Thanks l lot for you suggestion! In my ENV, I have made a quick-and-dirty CA on a CentOS system. For this , I made these certificate manualy all by myself from the openssl command-line. These certificate works very well between linux to linux system, But When I made it for windowsXPSP3 system,

how to create cert file for windowxp sp3

2009-04-13 Thread shawnlau
Hi all! I have a question that makes me feel so confuse. I have updated OPENSSL.rpm to openssl-0.9.8e-7.el5, and have a little modify to openssl.cnf and CA scripts! The change like below: The OPENSSL.cnf: dir= ./demoCA # Where everything is kept

error 20 at 0 depth lookup:unable to get local issuer certificate

2009-04-09 Thread shawnlau
Hi all! How about this meaning? when I use CA.sh -newreq create a new certificate, and use CA.sh -sign to sign this caertificate, after that , CA.sh -verify to check this cert, and the error like this: error 20 at 0 depth lookup:unable to get local issuer certificate Best

Checking for RSA private key (/etc/ipsec.secrets) [DISABLED]

2009-04-01 Thread shawnlau
Hi all! When I use the x509 certification to connection two network, For I have set the password for private key, So I add the line : RSA /etc/ipsec.d/private/right.key passwd to /etc/ipsec.secrets file. After that , I restart ipsec service , and checked the ipsec status by

答复: Checking for RSA private key (/etc/ipsec.secrets) [DISABLED]

2009-04-01 Thread shawnlau
with S/WAN. I've never even heard of this. -Kyle H On Tue, Mar 31, 2009 at 11:50 PM, shawnlau net17shawn...@gmail.com wrote: Hi all! When I use the x509 certification to connection two network, For I have set the password for private key, So I add the line : RSA /etc/ipsec.d/private

答复: 答复: Checking for RSA private key (/etc/ipsec.secrets) [DISAB LED]

2009-04-01 Thread shawnlau
/ipsec.secrets) [DISABLED] This is not an openswan support list. I have no idea, and unless one of the other lurkers here has knowledge of openswan, you're most likely not going to be able to find an answer here. :/ -Kyle H On Wed, Apr 1, 2009 at 1:34 AM, shawnlau net17shawn...@gmail.com wrote: Thanks

答复: How to make X.509v3 digital certificate?

2009-04-01 Thread shawnlau
that it is asking for permission to do.) -Kyle H On Sun, Mar 29, 2009 at 9:00 PM, shawnlau net17sharp...@163.com wrote: Hi all! I just want to know how to make the X.509v3 digital certificate with openssl-0.9.8j, if it’s impossible ? Thanks a lot and Best regards! Shawn

How to make X.509v3 digital certificate?

2009-03-29 Thread shawnlau
Hi all! I just want to know how to make the X.509v3 digital certificate with openssl-0.9.8j, if it's impossible ? Thanks a lot and Best regards! Shawn

答复: How can I change the limits in openssl

2009-03-26 Thread shawnlau
For your question, I just want to know the environment of what you are using for now! The openssl Just for web? Or for a lot of concurrent connections that user request for their own certificate? 发件人: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl. org] 代表 Sachin Kumar

答复: How to use the ec command

2009-03-26 Thread shawnlau
I suggest you to read the INSTALL file that has already contained in the openssl.tar.gz package! This opton I haven’t used before! 发件人: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl. org] 代表 huangjun_cauc 发送时间: 2009年3月25日 10:49 收件人: openssl-users@openssl.org 主题: How to

答复: [FWD] How to disable SSL

2009-03-26 Thread shawnlau
I think maybe you should install the openssl by manual compile and install it all by yourself. And when you do that, you could remove these cifrates levels below 128 bits. That's just my option! I'm still not very good at openssl skill . -邮件原件- 发件人: owner-openssl-us...@openssl.org

答复: How to install 2 instances o f openssl on the same machine

2009-03-26 Thread shawnlau
Just download openssl-0.9.8i.tar.gz, and install it in a folder what defined all by yourself. Just like /usr/local/openssl, then using the follow commands: tar -zxvf openssl-0.9.8i.tar.gz cd openssl-0.9.8i ./config --prefix=/usr/local/openssl shared threads make make test (if there have no error

compile install openssl_0.9.8j occures someerror!

2009-03-25 Thread shawnlau
Hi! In my centos5.2 system, I have already installed openssl_0.9.8b-10.el5_2.1.rpm package. But when I try to make a CA server, the crl.pem could no be made by me, prompted like below: [r...@cncips ~]# openssl ca -gencrl -out crl.pem Using configuration from /etc/pki/tls/openssl.cnf