Unique naming convention that can be used for certificates Reg.

2012-05-17 Thread Ashok C
Hi, What would be the unique names with which I can store CA certificates in file system? I understand that issuer-id and serial number are the unique identifiers for a certificate. But using this name for a certificate file name makes it very long and also introduces some characters like @,=

Openssl and config file options

2012-05-17 Thread kenc_openssl
Hi, I am trying to add extra extensions to certain certificates that I sign with my own CA. 1) I'd like all server generated certificates to have: basicConstraints = CA:false and one of the certificates to have: extendedKeyUsage = serverAuth I created an extra section called new_section in

error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number

2012-05-17 Thread Greg Wittmeyer
Hello all, hope someone can help. I upgraded from 1.0.0d to 1.0.1c and immediately started getting this error: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number It occurs during SMTP after successful negotiation. Oddly, the first command after negotiation works, but not the

Cert order in .pem format

2012-05-17 Thread KThirumal
Team, Had a query in the certs that we load, The CA's provide our certs in .p12 format, which we need to convert to a .pem and load to SSL structure during initialization. On converting to .pem, it is in the following format, Private Key, CA Certs and Domain Certificate. In our code, we use