can openssl command line tool be used to create a SCEP cgi?

2014-02-11 Thread Jason Haar
Hi there We're looking at introducing Mobile Device Management into our organization and we have a home-built PKI based around openssl command line tools and a bunch of shell scripts. Works well, very bespoke - moving away from it would be a major drama (ie changing to a better PKI that had

Re: Installation Win32 Borland5.5 openssl-1.0.1f

2014-02-11 Thread Ian Rye
Hi Thomas, Thank you very much for your reply. I'm 99% sure it's a bug (in configure or do_nasm) I do hope that someone on the team can find time to fix it. OpenSSL is a magnificent piece of work. Thanks for the advice to use the VC++ DLL. The openssl build against VC++ was totally

OpenSSL 1.0.1e failed in FIPS mode

2014-02-11 Thread pratibhajagnere
I am building OpenSSL with FIPS. When I tried running openssl binary in FIPS mode by exporting OPENSSL_FIPS=1, it is giving below error, 47657709811344:error:2D06B06F:FIPS routines:FIPS_check_incore_fingerprint:fingerprint does not match:fips.c:232: My platform is Linux Suse. I dont

Re: Extended Validation OIDS

2014-02-11 Thread Tom Pfeifer
On 02/10/2014 08:27 PM, Dave Thompson wrote: From: owner-openssl-us...@openssl.org On Behalf Of Tom Pfeifer Sent: Monday, February 10, 2014 16:53 snip I've tried doing that with no success so far, most likely due my lack of understanding of how to set up policy sections in the config file

Re: Extended Validation OIDS

2014-02-11 Thread Dr. Stephen Henson
On Tue, Feb 11, 2014, Tom Pfeifer wrote: On 02/10/2014 08:27 PM, Dave Thompson wrote: From: owner-openssl-us...@openssl.org On Behalf Of Tom Pfeifer Sent: Monday, February 10, 2014 16:53 snip I've tried doing that with no success so far, most likely due my lack of understanding of how

Re: Extended Validation OIDS

2014-02-11 Thread Tom Pfeifer
On 02/11/2014 10:55 AM, Dr. Stephen Henson wrote: On Tue, Feb 11, 2014, Tom Pfeifer wrote: On 02/10/2014 08:27 PM, Dave Thompson wrote: From: owner-openssl-us...@openssl.org On Behalf Of Tom Pfeifer Sent: Monday, February 10, 2014 16:53 snip I've tried doing that with no success so far,