Re: Wildcard ssl certificate using subjectAltName

2006-02-14 Thread Khai Doan
From: Dr. Stephen Henson [EMAIL PROTECTED] Reply-To: openssl-users@openssl.org To: openssl-users@openssl.org Subject: Re: Wildcard ssl certificate using subjectAltName Date: Tue, 14 Feb 2006 13:38:33 +0100 On Mon, Feb 13, 2006, Khai Doan wrote: Can I have subjectAltName = critical,DNS

Re: Wildcard ssl certificate using subjectAltName

2006-02-13 Thread Khai Doan
Has anyone successfully create a double wildcard certificate (*.*.domain.com) ? Does it work with MSIE 6 XP service pack 2 ? Attached is my openssl.cnf, my test CSR, and my test certificate. Can you please see if anything wrong? Does anyone has a working certificate with subjectAltName

Re: Wildcard ssl certificate using subjectAltName

2006-02-13 Thread Khai Doan
-users@openssl.org Subject: Re: Wildcard ssl certificate using subjectAltName Date: Tue, 14 Feb 2006 02:49:36 +0100 On Mon, Feb 13, 2006, Khai Doan wrote: Has anyone successfully create a double wildcard certificate (*.*.domain.com) ? Does it work with MSIE 6 XP service pack 2 ? Attached is my

Re: Wildcard ssl certificate using subjectAltName

2006-02-13 Thread Khai Doan
subjectAltName Date: Tue, 14 Feb 2006 04:23:03 +0100 On Mon, Feb 13, 2006, Khai Doan wrote: For some reason Hotmail does not allow me to attach those files: Test CSR: -BEGIN CERTIFICATE REQUEST- MIICuzCCAiQCAQAwggF5MQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5p

Does anyone know how well MSIE support HTTP to TLS upgrade (RFC 2817) now ?

2006-02-10 Thread Khai Doan
Does anyone know how well MSIE support HTTP to TLS upgrade (RFC 2817) now ? Does Microsoft has any plan to support RFC 2817? Khai __ OpenSSL Project http://www.openssl.org User Support Mailing

Certificate with multiple Common Names

2006-02-10 Thread Khai Doan
How can I generate a CSR with multiple common names ? How can I sign a CSR with multiple common names? (I already set up a CA, but don't know what I need to do, whether or how to edit my openssl.cnf file) Thanks for any hint. Khai

nsSslServerName

2006-02-10 Thread Khai Doan
Can someone please explain the nsSslServerName directive/extension? I found http://wp.netscape.com/eng/security/cert-exts.html, but what is shell expression ? Is it a regular expression ? Can someone give me an example? Thanks, Khai

Wildcard ssl certificate using subjectAltName

2006-02-10 Thread Khai Doan
To quote rfc 2818: If a subjectAltName extension of type dNSName is present, that MUST be used as the identity. Otherwise, the (most specific) Common Name field in the Subject field of the certificate MUST be used. Although the use of the Common Name is existing practice, it is