EAP-TLS certs

2006-08-31 Thread Teo
Hi, I have need of certs for 3 clients, for some tests on freeradius with a sniffer that it capture the input. Therefore I want certs of test the type which already use, generated with the script CA.all inside freeradius-1.1.2 sources. How I can make 3 certs for distinct for the clients? Is it

EAP-TLS certs

2006-08-31 Thread Teo
Hi, I have need of certs for 3 clients, for some tests on freeradius with a sniffer that it capture the input. Therefore I want certs of test the type which already use, generated with the script CA.all inside freeradius-1.1.2 sources. How I can make 3 certs for distinct for the clients? Is it

RE: ocsp response validation problem

2006-08-31 Thread Fitzsimons, Nick
Hi, From my work in this area, I found that the error at the end of the ocsp command is only a problem with the running of the command - the contents of the file produced are not impacted. However, the way to avoid the error is to concatenate (doing it in a text editor is fine) all the certs

supporting smime-signed receipts as per RFC 2634

2006-08-31 Thread hauser
Hi, It would be great to have an additional parameter to create the request for such a receipt in openssl smime -sign as per http://www.faqs.org/rfcs/rfc2634.html chapter 2. It seems that MS-Outlook can do this since a while. Others seem to have struggled with validating such smime-signed

RE: How to retrive the delta CRL location and revocation reason?

2006-08-31 Thread surendra.ande
Hi, I am working on CRL validation. I am using openssl 0.9.8b. QUESTION: How to retrive the CDP for Delta CRL? Procedure: Delta CRLDP is a bit messy because it isn't yet supported by OpenSSL directly. However you can add the OID manually using OBJ_create() and alias the extension to CRLDP and

RE: How to retrive the delta CRL location and revocation reason?

2006-08-31 Thread surendra.ande
Hi, I am working on CRL validation on LONGHORN CA. My issue is to extract the CDP for delta crl. I found a way to extract the delta crl name from normal crl file. Is it correct? Let me explain you clearly: I found that the delta crl name format in LONGHORN CA is some thing like... Normal CRL:

Re: Unable to locate the keystore/certificate store or private key

2006-08-31 Thread Nils Larsch
[EMAIL PROTECTED] wrote: Nils, The basic succession of calls are as follows. I think the program waits for an ssl_read or ssl_write to implicitly trigger the handshake process. meth = TLSv1_client_method() SSL_load_error_strings(); SSLeay_add_ssl_algorithms(); SSL_CTX_new(meth); ssl =

Re: How to get the reason for rovocation in CRL Validation?

2006-08-31 Thread Dr. Stephen Henson
On Thu, Aug 31, 2006, [EMAIL PROTECTED] wrote: Hi, I am using openssl 0.9.8b. I am doing CRL validation. In that process, I got the CRL status thru the following API: API: sk_X509_REVOKED_find(crl-crl-revoked, rtmp). After that, I need find out the reason for revocation. I am using

stunnel 4.16 released

2006-08-31 Thread Michal Trojnara
A new version of stunnel has been released. Version 4.16, 2006.08.31, urgency: MEDIUM: * New features sponsored by Hewlett-Packard - A new global option to control engine: engineCtrl = command[:parameter] - A new service-level option to select engine to read private key: engineNum =