Customer Enterprise X.509 Extension OID Assignment

2012-02-06 Thread Curt Sampson
I'm not terribly familiar with OIDs in ASN.1 and the like, so I wanted to confirm that I have the correct impression here. If I were to create a custom X.509 certificate extension for use within my enterprise and with others outside who wanted to write or modify their own software to interoperate

Re: Customer Enterprise X.509 Extension OID Assignment

2012-02-06 Thread Peter Sylvester
On 02/06/2012 09:41 AM, Curt Sampson wrote: If I were to create a custom X.509 certificate extension for use within my enterprise and with others outside who wanted to write or modify their own software to interoperate with it, I'd need to assign an OID for this extension, right? And for that,

Re: Customer Enterprise X.509 Extension OID Assignment

2012-02-06 Thread Curt Sampson
On 2012-02-06 10:00 +0100 (Mon), Peter Sylvester wrote: It is one possible way, you need to find someone that owns an OID (forever) and dedicates you a number. Ok; that makes it quite clear. So any OID is fine, so long as you own it. ...but I gather that others use this for pretty much

Re: Customer Enterprise X.509 Extension OID Assignment

2012-02-06 Thread Jakob Bohm
On 2/6/2012 9:41 AM, Curt Sampson wrote: I'm not terribly familiar with OIDs in ASN.1 and the like, so I wanted to confirm that I have the correct impression here. If I were to create a custom X.509 certificate extension for use within my enterprise and with others outside who wanted to write

Re: Customer Enterprise X.509 Extension OID Assignment

2012-02-06 Thread Christopher Vance
IANA allocate Private Enterprise Numbers under iso.org.dod.internet.private.enterprise (1.3.6.1.4.1). See http://www.iana.org/assignments/enterprise-numbers. -- Christopher On 6 February 2012 20:11, Curt Sampson c...@cynic.net wrote: On 2012-02-06 10:00 +0100 (Mon), Peter Sylvester wrote: It

Openssl as a library in iOS/Certificate Signing Request PKCS10

2012-02-06 Thread Kacper86
Hi, I would like to use openssl library in my iOS application (Objective-C) to generate certificate signing request. If I wanted to use openssl application in linux I would write something like that: openssl req -new -newkey rsa:2048 -nodes -out common_name.csr -keyout common_name.key

reference docs at old sial.org

2012-02-06 Thread Peter N. Steinmetz
Hi, Just wanted to let the users of openssh know that the old reference documents from sial.org, which provided a handy discussion of maintaining a certificate authority and other aspects of use of openssh, are now back online at http://novosial.org. The sial.org domain was sold several

RE: Openssl as a library in iOS/Certificate Signing Request PKCS10

2012-02-06 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Kacper86 Sent: Monday, 06 February, 2012 09:49 I would like to use openssl library in my iOS application (Objective-C) to generate certificate signing request [like] openssl req -new -newkey rsa:2048 -nodes -out common_name.csr -keyout

RE: getting SSL_ERROR_ZERO_RETURN when calling operation from WSDL using axis2c

2012-02-06 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of manoj dhyani Sent: Saturday, 04 February, 2012 23:59 both soapUI and client application built using axis 2c are running on the same machine, I have axis2java based client running on the same machine and works fine the

Re: Openssl as a library in iOS/Certificate Signing Request PKCS10

2012-02-06 Thread Curt Sampson
On 2012-02-06 20:43 -0500 (Mon), Dave Thompson wrote: Even in these cases you might choose to discard the first keypair and generate a new one. Careful there; it does depend on for what you're using the keypair. For your typical TLS-enabled-web-server usage that's fine, but if you're doing