|
First of all I'd like to say thank you
:-)
In fact I found a solution similar to the one
suggested by you, so you might be interested in knowing it:
I use the -des (usually it's 3des) and the -keysig
options and it works for both Nt 4 and Windows 98.
I'm a bit worried by the -keysig because I can't
understand exactly what it does.
Being a "newbie" in a security related filed makes
me feel rather unsecure.......
Costantino
----- Original Message -----
Sent: Monday, June 05, 2000 4:04 PM
Subject: Re: x509v3 certs and NT4
Costantino,
I've been
playing with personal cert's and so I believe you would use
something like
this:
openssl pkcs12 -export -keyex -noiter -keysig -in client.crt -inkey
client.key
-name "Personal Certificate" -out
msclient.p12
I believe that the three options
(-keyex -noiter -keysig) make it
compatible with NT/IE4 as opposed to
Netscape.
I don't really know the adverse effects of setting these options,
I think
-noitter makes the pkcs12 blob less secure.
Don't take this as a
definitive answer as I don't understand all the
details
yet.
Mikey
"Costantino Imbrauglio"
<[EMAIL PROTECTED]> on 05/06/2000 10:24:18
Please respond
to [EMAIL PROTECTED]
To:
[EMAIL PROTECTED]
cc: (bcc: Mike Innes/Virgin
Direct/GB)
Subject: x509v3 certs and
NT4
Hi,
this may not be the proper mailing list for
my request, but the subject is
related and maybe somebody will be able to
help me.
I've generated sono "Personal Digital IDs" using openssl. The
format chosen is
the PKCS12 blob file.
I've installed them on
Windows 2000 without any problem. When I tried to install
the same certs
under Windows NT 4 I get an error message.
Any idea on which flags need
to be set in order to generate certificates
compatible with NT
4?
Thank you very much in advance.
Best
regards,
Costantino
Imbrauglio
********************************************************************************
Internet
communications are not secure. This message is confidential to the intended
addressee. Any copying or distribution of it by anyone without the addressee's
consent may be unlawful. If you are not the intended addressee, please inform
us immediately and then delete this message.
Virgin Direct Personal
Financial Service Ltd is regulated by the Personal Investment Authority for
life insurance, pension and unit trust business and represents only the Virgin
Direct marketing group. Registered office: Discovery House, Whiting Road,
Norwich NR4 6EJ, UK. Registered in England No. 3072766.
The Virgin One
account is a secured personal bank account with The Royal Bank of Scotland
plc. It is provided by Virgin Direct Personal Finance Ltd which is a
representative only of Virgin Direct Personal Financial Service Ltd.
Registered office: Waterhouse Square, 138-142 Holborn, London EC1N 2TH, UK.
Registered in England no 3414708.
The Virgin Deposit Account is a
personal deposit account with The Royal Bank of Scotland plc administered by
Virgin Direct Personal Financial Service Ltd.
All telephone calls are
recorded and may be
monitored.
********************************************************************************
|
