Re: X.509 certificate overview + status

2009-03-03 Thread Werner Koch
On Mon, 2 Mar 2009 17:35, marcus.brinkm...@ruhr-uni-bochum.de said: > Ubuntu comes with dumpasn1. There are also quite a few libraries. You may also import the certificate into GnuPG ("gpgsm --import foo") and run "gpgsm --dump-cert" to get a human readable printout. Example: $ gpgsm --dump-c

Re: X.509 certificate overview + status

2009-03-03 Thread Peter Saint-Andre
Travis wrote: > Recently I set up certificates for my server's SSL, SMTP, IMAP, XMPP, > and OpenVPN services. Actually, I created my own CA for some of the > certificates, and in other cases I used self-signed. BTW, we give away free certificates for XMPP services here: http://xmpp.org/ca/ T

Re: X.509 certificate overview + status

2009-03-02 Thread Dave Howe
Travis wrote: > Hello, > > Recently I set up certificates for my server's SSL, SMTP, IMAP, XMPP, > and OpenVPN services. Actually, I created my own CA for some of the > certificates, and in other cases I used self-signed. It took me > substantially more time than I had anticipated, and I'm left

Re: X.509 certificate overview + status

2009-03-02 Thread Eric Murray
On Mon, Mar 02, 2009 at 05:35:20PM +0100, Marcus Brinkmann wrote: > Travis wrote: > > Further, trying to dig into ASN.1 was extremely difficult. The specs > > are full of obtuse language, using terms like "object" without > > defining them first. Are there any tools that will dump certificates >

Re: X.509 certificate overview + status

2009-03-02 Thread Marcus Brinkmann
Travis wrote: > Recently I set up certificates for my server's SSL, SMTP, IMAP, XMPP, > and OpenVPN services. Actually, I created my own CA for some of the > certificates, and in other cases I used self-signed. It took me > substantially more time than I had anticipated, and I'm left with > feeli

X.509 certificate overview + status

2009-03-02 Thread Travis
Hello, Recently I set up certificates for my server's SSL, SMTP, IMAP, XMPP, and OpenVPN services. Actually, I created my own CA for some of the certificates, and in other cases I used self-signed. It took me substantially more time than I had anticipated, and I'm left with feelings of unease.