Hi,
I have also posted this issue in the OpenSSL mailing list but it
occurs down in the OpenSSL libraries and this is probably the place to
ask.
This issue doesn't occur in a 32 bit compile of OpenSSL 1.0.1c (with
libcurl 7.27.0) but
does when running the same code in 64 bit.*
When I do
I want to implement a CA using openssl and some (basic) bash scripting.
I try to understand and conform with the standards. So I have started by
reading RFC5280 [1]. I want to write a CPS and link to it from the CA
using certificatePolicies cPSuri qualifier.
First thing I did was to generate
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager majord...@openssl.org
Strange, my previous answer was sent empty, and every try results in an
empty mail stored in my postponed folder...
Anyway.
Use decimal numbers for an OID.
Yours will be 2.25.266774424501754920443129542379924997403
And for your policyIdentifier, it should be easier to read if expressed
as
Simple really:
The OID must be written in decimal, not hexadecimal.
Please refer to the ITU-T page you referenced to figure out
how the bytes and bits of your UUID map to numeric parts of
the OID and then write those out in decimal.
On 9/28/2012 1:24 PM, Valentin Bud wrote:
I want to
Hello Erwann,
On Fri, Sep 28, 2012 at 02:53:35PM +0200, Erwann Abalea wrote:
Strange, my previous answer was sent empty, and every try results in
an empty mail stored in my postponed folder...
Anyway.
Use decimal numbers for an OID.
Yours will be
Hello Jakob,
On Fri, Sep 28, 2012 at 04:20:00PM +0200, Jakob Bohm wrote:
Simple really:
Indeed. When you know a certain topic and you've studied for a certain
time it's really simple. For me, for now, compliant RFC CA is a nebula.
I am starting to see the what pieces this puzzle needs and to be
Bonjour,
Le 28/09/2012 16:29, Valentin Bud a écrit :
On Fri, Sep 28, 2012 at 02:53:35PM +0200, Erwann Abalea wrote:
Strange, my previous answer was sent empty, and every try results in
an empty mail stored in my postponed folder...
Anyway.
Use decimal numbers for an OID.
Yours will be
On 9/28/2012 4:45 PM, Valentin Bud wrote:
Hello Jakob,
On Fri, Sep 28, 2012 at 04:20:00PM +0200, Jakob Bohm wrote:
Simple really:
Indeed. When you know a certain topic and you've studied for a certain
time it's really simple. For me, for now, compliant RFC CA is a nebula.
I am starting to
On Fri, Sep 28, 2012, YUN GAO wrote:
Hi there:
I found a different behavior between 0.9.8l and 1.0.1b, it happens
when s_server using an invalid certificate, and s_client requires a
verification
of server certificate. The invalid certificate has an incorrect
signature length, and its name
On Fri, Sep 28, 2012, James Swift wrote:
Hi,
I have also posted this issue in the OpenSSL mailing list but it
occurs down in the OpenSSL libraries and this is probably the place to
ask.
This issue doesn't occur in a 32 bit compile of OpenSSL 1.0.1c (with
libcurl 7.27.0) but
does when
11 matches
Mail list logo
