On Tue, Apr 08, 2008 at 08:43:51PM -0400, Big BDI wrote:
> Is something wrong with my certificates(Pasted below)?
> I generated them with ECCcertgen.sh bundled with
> openssl... Apache does not generate any errors. One
> of my test keypairs is pasted below (I used a
> secp521r1 curve, but I didn't change the comments.
> They still indicate secp160r1 or something like that).
The cert does not have basicConstraints or keyUsage bits. It is
an X509 cert, not an X509v3 cert. Otherwise it looks fine.
Try this pair of CA cert/key and Server cert/key. Don't worry (for
me), they are fresh random keys not used anywhere. Identically built
certs work with TLS in pre-release Postfix 2.6. If these work better,
perhaps the extentions are relevant. If so, you just need to craft
a suitable extension section in the "conf" file. These use secp256r1
(aka prime256v1).
begin 644 eckeys.cpio.gz
M'XL(`"L?_$<``^V967/B2!*`YUF_0OVV&^X>[EMAIL PROTECTED]"")`08/RFHR3N
M&P3\^LT"MX\VW>V.V9V=C7$^R*4ZLJ[,)#\9:4A#`D*"[EMAIL PROTECTED]@D!T(9;97T72
MS^\(J?+E+Q)D+4^%7+B\)ZGQ6*\_-HOHNB1?"VF<TO7V]R6=_09B07F4C])X
M2S''@]CQ-KZ4F/3H>C-:S#$O\?]`!_&?3PT=NA[%4[ZYFR5T_=R?29KC6,"&
[EMAIL PROTECTED]&"4YR;$C/0T?%/-[NUI0GTV*Q'FV',\S3--O$7TIX^=*I$>&IL[?9
M[&`"WKKM=C[SG>BV24M^L%A//O.-%^76K;]8%_&<[VSC^90>H:9[ZT6PS'0'
M,\"[U;SUYODZWFS7N_0\>[A8;'[EMAIL PROTECTED]'DU)EJWI9G.[80LI_C7;_)XN9L_'
M$$]'&:AYM<\F##=IOEA3S)/EFN<-'@E8%K$L\W`+.E_UHS<#2+ZE:_XR0$`O
M!PBO!W1VR9BFV__USA^7P;=WR724\G?TR(.RQ>L;?]'XXDI'V1>:[EMAIL PROTECTED]
MQWHQYK4N)[EMAIL PROTECTED]"I8T+"`<4V9J,;S&.-5Q+&$AP8*"!?&M
M7B:9@&F,X8E$3&6L(XP4K*58$W`<8TW"E&*DLW(<7]>@)!A)&*P\05A1,)5P
M)F)5P)J"18&]2A+68BR#6GI=`RQ52G%&<9:P)TR:B\Q;8$ERCG6=;2J6<0KK
MU*YKT*";@$5XIEC6WG0AG:;`MSP;\\OU:[EMAIL PROTECTED]/#ELZ9<V]>
M3_'8;,8;N!X+FK?K>#3?;C"?PL5"I)B^F<XB.`J[SC4U7^WG;[EMAIL PROTECTED];[EMAIL
PROTECTED]
MC0['Q*J.+04C"QLN.T,X0&)A%T[5Q9:*D<-NW%:[EMAIL PROTECTED]
M[9`9XO'G,T_H<93A_]3\3.S1NAG/**XPWZV\<-W*L^=6OG7<RFN_K?PAM_TJ
MFW.8QI:+R5-(MC$RL>FRD'SN_TOQ6$(0K9BABE#0F<&+*58$K(#1&LR>D89%
M#><[EMAIL PROTECTED]&AF4P^YRM"!G,B7(X;A4;X,4ZSF6LB4P5^%1V
[EMAIL PROTECTED]@%^\=*CG.#>6ZJX43'J8HED8V%SGG^/%R7L:`RM]7`
MN4`Y.'[EMAIL PROTECTED]<^X+$].I>DW><L+(<SV+1,ZYEO,]SPY/
MED5V-P4I/9,47IWX-\/98+JUM)O()Y.J>5Q5.[YLF,[EMAIL PROTECTED]"=2-XMFSR2#
MB"/37N2'3FF7`[L7!)Y3#EL/]VG1[QO'^.2$/M&[EMAIL PROTECTED]'WHEE/\MSI/IUM
M#NZ)])@2SB2+R)X(4)D-DY$9955WEU1[BA\&I5.<E3:<<EOO66;TT&\*Z6R*
M:.3DOHG.BCER\/N=OC)[EMAIL PROTECTED]"IV[1G1G[S#+M(')2WUQ4K0YLPTLD
M.W#J)[EMAIL PROTECTED](2Z)2I;-D&^/[EMAIL PROTECTED]"&NL.Y+B)/
M=;Y7'?K!IK2"@<W!$JM.6>]U7^S7,E_OUXE(^W)H:[EMAIL PROTECTED])5%_[85IR
M;G#>YYU3*DVHG`_Z<M&5PF$R.TQAKUW?]"Y*#WZCTPN*+BP]NZ\OL]KD4#N1
MC+MH]B-W,MT]S.O#5`J/6;^)H-/4<^O[1`J*`#F'FDUBLYBLAI-1U2B1:05.
MW[YO3KF!&)X>D+E-C\HX$5'9CTAD%BET'+?:@6>:1?%8]DVS;%J$!+->JRLY
M=^K#,EI[W.*PZ3G;[EMAIL PROTECTED]>GH:+T]:,5JMIAO[I)D]V:@/LTYM[$M+-Q\O
M=&[EMAIL PROTECTED];2%[IAV!10:3BU&%*")!K6*2;DE*QZS`
M?MEV:X'LN$705<6Q:]?U$Q?&)Z&A#UI-HW^R.ZORSO;+([EMAIL PROTECTED]>QI9Y
ME,G3@&_[<W=V:UC$=%+$P1L[?X^9<S^R\_>8.?<C.W^/F7,_LO,G,Q]\W\7!
M&QT[A',.B5=T+&?3[8V68IG.;]9+O[U7[FL/0BM7)O5>WJQ.HS%*M]NA$"TL
MKS;M#&([EMAIL PROTECTED]"H*-J&RH=QH^>U;QQW;:(R:^]=L9FM;^2CZZOM2T1RFO;;>`2Y
M/'[EMAIL PROTECTED](Q"5WLD1\3-'P`_G&2->A$F6V(5>#U;%WSF#QTA92\$F
M'<=ST]%2*GKZ;%..$Z>E]Q0GW#JC==ZYF>[EMAIL PROTECTED]@0N`[K\6C!
M>&N+;F`'!7'JTVC:/%B[6=Q5CW=^XH:-4-TZEN(1-Z]55^F-[*U6RX3H-V6/
MMCN#^^Z0DT]--;[EMAIL PROTECTED];K-*T;GQP_+V]OEHK^WAY=F*
MB+Z/T1Z/,$WH];/5']_UKV?_M1\Z__H^8=J?QFCRWX?1%/5]C/;-`.._QVCT
M$,^64_K[95O_GVRF`\EDF*;L"6FB2%DN".D4)&>QSE(K!6A-QX)PG6ITBA/*
MR(U!$:2#D&)"6@:,I[&DD.HX$;&&&+SIWV,S$:>(98&ZQB!-D'`,DR8L!X4E
MJ921(11@):GQ7;([EMAIL PROTECTED]@3<L$,[EMAIL PROTECTED],R-G]'[EMAIL
PROTECTED]:6
MSMWBOP";N:31N0IGS"[EMAIL PROTECTED]'A6C+42/ITCP^=S=F4,0']+U#(#JFDJ'
MK3RCV0]U1XT.WZ<)"U![\#3&:HS/(,#!EC\_-5O3$51_T_R'(-.UL6NQ=-^P
MSSQ',`*,`YB3P;^Q>ZX$FW$TK)G,[EMAIL PROTECTED]'.Q8'Y#YYT*F<H9,`2/$4#`&
M-X1;4[%`V?6!4T.]%F-19!]NV*<0Y04E&HQ"$3U_$C+8Y8)3`YU"7!)AK,H"
M`K!?*C(-$)IRQ(CT:[EMAIL PROTECTED]@4N1CB&L91J+9A"[EMAIL PROTECTED]'*OG>[EMAIL
PROTECTED]"A-P9G!
M//UI>'SF3T-C`R$600$"[EMAIL PROTECTED]&4?>MA7)Y&M1T]QDK)(I:0_Y<R89?4'ZQIG
M=O_VG!D]Q.>ZZ'4=<.;#7X,SV4$^<:8]Z\F#OE`FU>XNN?=W`]'80OY95HM!
M_6[QX`WW:1,`SG0+X02'.4G%C+!^W+FC.RF=<E!C'4]C!%GUP'LLVR1(SPER
M49$VE6ZPJQ\B9677Z<RLMO;#!N6RI=E<W.5(;=1+-%AV2I_6R*$UZE<T(QG>
M&_YF6IG-1U*5WK>$ULPZ.NN[^4UG:#CMN]FJ97$D&I1%X1Q]4I[1T&%,60:6
M3TAI77BS;9+`)D6_>+S[K!X$?=\,()??`.4%7=<L?8;$:[-P7!.63,:OH;22
M'\;S0%:M-9KT]JCEW&2:LSS1^UU9<K\"I=>8E/L5*+WF$]RO0.DUG^!^!4JO
M^03W*U#*F+0#MQ,&WI`T=]-2&5!NH'J$CNJ'HM.MFZ6L'CMA947+\7*ZC\KY
M6M'KHD1&[EMAIL PROTECTED]"T'WHR5E#['I^W13$=+4X+%.'*^OYI)4\G,BN7ADW3K5[\I*>
MKH#I*W9*W\>E7_'SW5R:O6*GKVCZ;C:M([5JKA;:5C')*4\;SJ9]W(WVY6#9
M)@NA>N,IF:.I<[==J7^73;_G>C_R/.ZGKE>\FTW?)>_M]ZT\_?\P"HG7<,)/
@GS[]]B$?\B$?\B$?\B$?\B$?\B&_+/\&[EMAIL PROTECTED]
`
end
--
Viktor.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager [EMAIL PROTECTED]
