Re: CA Key and Self-Signed Server Certificate Generation

2005-01-12 Thread Ringaby Anders
At the prompt, I did the following command: # sh sign.sh server.csr : command not foundline: 6: 'usr/sbin/sign.sh: sign.sh: line 15: syntax error near unexpected token `in 'usr/sbin/sign.sh: sign.sh: line 15: `case $CSR in Now, what I don't understand is that I used the syntax as

Newbie Question SSL Apache

2005-01-12 Thread R. Markham
Hallo, I have a question regarding SSLCACertificateFile from the SSL-Apache in http.conf File. I have a server certificate which is issued by our Sub CA. My Question which Certificate must I use the Root CA or the Sub CA Certificate. The Root CA Certificate is issued by DFN-PCA in

Re: Newbie Question SSL Apache

2005-01-12 Thread Bernhard Froehlich
R. Markham wrote: Hallo, I have a question regarding SSLCACertificateFile from the SSL-Apache in http.conf File. I have a server certificate which is issued by our Sub CA. My Question which Certificate must I use the Root CA or the Sub CA Certificate. The Root CA Certificate is issued by

AW: Newbie Question SSL Apache

2005-01-12 Thread R. Markham
Hi Ted, I am rather confused which of the Variable to use. It seems to me they are equal. SSLCACertificateFile and SSLCertificateChainFile Have any idea. Regards Richard Markham -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Bernhard

Re: CA Key and Self-Signed Server Certificate Generation - Follow-up

2005-01-12 Thread Dr. Stephen Henson
On Tue, Jan 11, 2005, Servie Platon wrote: Hello Dr. Henson, And thank you again for this advice. --- Dr. Stephen Henson [EMAIL PROTECTED] wrote: I suggest you ignore that script: and use the CA.pl script and the appropriate documentation instead. As suggested by you, I used the

Re: CA Key and Self-Signed Server Certificate Generation - Was

2005-01-12 Thread Servie Platon
Hello Mr. Ringaby, Thanks for the reply. My guess is that the script code somehow got messed up when you copied it from the site, or maybe the script for some reason contains hidden characters. I think you are right Sir because I copied the script from the site on a windows machine and

micalg

2005-01-12 Thread Dmitry Belyavsky
Hello! I found out that openssl smime puts micalg: sha1 either message is hashed with sha1 or any other algorithm. It is hardcoded into current snapshot (20050112) of 0.9.8 version (crypto/pkcs7/pk7_mime.c). RFC 2633 (http://www.ietf.org/rfc/rfc2633.txt) says: ___ The micalg

Re: micalg

2005-01-12 Thread Dr. Stephen Henson
On Wed, Jan 12, 2005, Dmitry Belyavsky wrote: Hello! I found out that openssl smime puts micalg: sha1 either message is hashed with sha1 or any other algorithm. It is hardcoded into current snapshot (20050112) of 0.9.8 version (crypto/pkcs7/pk7_mime.c). RFC 2633 (http://www.ietf.org

How to change/remove p12 file password

2005-01-12 Thread Jaleel P.A
Hi, I have a p12 file in which the private key is password protected. I want to remove the private key password. Is there any option in openssl to change/remove the p12's private key password ? Thanks __ OpenSSL Project

Re: question -- should SSL server send certs for all CAs?

2005-01-12 Thread Jason Keltz
Hi Jeffrey, Thanks for your response. So, is it a standard that the SSL enabled 'server app send the certificate chain, or just something that the app 'should' do? How can I test what certificates the server is actually sending back? I know that uw-imapd doesn't send the whole chain, and that

Re: Win32 OpenSSL feature request

2005-01-12 Thread Thomas J. Hruska
At 05:17 PM 1/11/2005 +0100, Erlend writeth: Hi Would like to see a COM/ActiveX interface to OpenSSL, so I can use it from vb (and possibly other languages too) Best regard Erlend S. E. Hello Erlend, I agree that this would be a really nice feature for VB users - not having to manually load

Re: question -- should SSL server send certs for all CAs?

2005-01-12 Thread Dr. Stephen Henson
On Wed, Jan 12, 2005, Jason Keltz wrote: Hi Jeffrey, Thanks for your response. So, is it a standard that the SSL enabled 'server app send the certificate chain, or just something that the app 'should' do? Its part of the standard. OpenSSL doesn't currently enforce this but it may do at

Re: How to change/remove p12 file password

2005-01-12 Thread Dr. Stephen Henson
On Wed, Jan 12, 2005, Jaleel P.A wrote: Hi, I have a p12 file in which the private key is password protected. I want to remove the private key password. Is there any option in openssl to change/remove the p12's private key password ? Currently you have to parse and recreate the

Re: Win32 OpenSSL feature request

2005-01-12 Thread Peter Sylvester
The first thing is to make the dll's it stdcall friendly. :-) (at least that the state of the art 3 years ago?) Once upon a time I converted the ddls to be directly usable by VB. The main problems are decribed below. I have not ported the changes beyond 0.9.6a, maybe I should retry. A boaring

[no subject]

2005-01-12 Thread Michael Jackson
What do I need to do to use OpenSSL on a hosting account?Life is that which you make of it! Do you Yahoo!? Take Yahoo! Mail with you! Get it on your mobile phone.

Re:

2005-01-12 Thread Michael Jackson
I am creating an e-commerce site and would like ssl certificates.Michael Jackson [EMAIL PROTECTED] wrote: What do I need to do to use OpenSSL on a hosting account?Life is that which you make of it! Do you Yahoo!?Take Yahoo! Mail with you! Get it on your mobile phone.Life is that which you make

SSL on a hosted site

2005-01-12 Thread Michael Jackson
Can I install this on a hosted site? How does this ensure protection for my costomers? Besides the cost, is there a difference between these SSL certs and ones from Versign or another company? MikeLife is that which you make of it! Do you Yahoo!? The all-new My Yahoo! – Get yours free!

Re: SSL on a hosted site

2005-01-12 Thread terr
Usually I lurk but I can offer some suggestions. 1) it will depend on the hosting company 2) certs are the same. The issue is that windows knows about certs from companies like verisign and does know know about anything you generate yourself - however technically they are the same. 3)

Re: SSL on a hosted site

2005-01-12 Thread Michael Jackson
Would openssl be a good choice for creating my own certs? The host for my service is not on a intranet. It is a seperate entity such as godaddy.com. Is it still possible?[EMAIL PROTECTED] wrote: Usually I lurk but I can offer some suggestions.1) it will depend on the hosting company2) certs are

Re: SSL on a hosted site

2005-01-12 Thread L Nehring
Have look at this http://www.schneier.com/paper-pki-ft.txt and some other papers on the that site. I run my own CA because I neither trust nor can I afford Verisign. There's no technical difference in the certs. best regards, Lance http://www.newparticles.com/ Michael Jackson wrote: Can I