In message <[EMAIL PROTECTED]> on Wed, 24 Jul 2002 10:26:35 +0200 (MEST), [EMAIL PROTECTED] (Sylvain Gaeremynck) said:
Sylvain.Gaeremynck> i'm new in openssl and i'm encoutering a problem Sylvain.Gaeremynck> with freessl/openssl. I made a server and a client Sylvain.Gaeremynck> that work fine with certificates i found in Sylvain.Gaeremynck> freessl demo (these certificates are 663 bytes Sylvain.Gaeremynck> big). The problem is that my programs don't work Sylvain.Gaeremynck> with certificates i create with openssl. I Sylvain.Gaeremynck> followed step by step tutorial I found on Sylvain.Gaeremynck> http://www.ooc.nf.ca/fssl/manual2/ apendix D - Sylvain.Gaeremynck> creating certificate but there is a size-problem: Sylvain.Gaeremynck> My der files are 862 bytes big and not 663 Sylvain.Gaeremynck> bytes. What's wrong? Does somebody know why my Sylvain.Gaeremynck> certificates are bigger? Most probably nothings wrong, except your programs if they expect certificates to be exactly 663 bytes long. You see, a certificate can vary in size, depending on the subject, the issuer and the extensions you may have included. A different guess (remember, it's just a guess on my part) is that the freessl demo create X.509 v1 certificates (they don't have any extensions), and your programs might only accept v1 certificates. OpenSSL can create both v1 and v3 cerificates, and with the default configuration file, it will create v3 certificates. To help you further, it would be a good thing if I could see the certificates you mentioned (both the one that "works" and the one that doesn't) and the OpenSSL configuration file you used. -- Richard Levitte \ Spannv�gen 38, II \ [EMAIL PROTECTED] Redakteur@Stacken \ S-168 35 BROMMA \ T: +46-8-26 52 47 \ SWEDEN \ or +46-708-26 53 44 Procurator Odiosus Ex Infernis -- [EMAIL PROTECTED] Member of the OpenSSL development team: http://www.openssl.org/ Unsolicited commercial email is subject to an archival fee of $400. See <http://www.stacken.kth.se/~levitte/mail/> for more info. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
