Re: subjectAltName removed from CSR when signing

2012-01-04 Thread Mick
on this. -- Regards, Mick signature.asc Description: This is a digitally signed message part.

Re: subjectAltName removed from CSR when signing

2012-01-04 Thread Mick
On Wednesday 04 Jan 2012 13:40:12 you wrote: On Wed, Jan 4, 2012 at 1:57 PM, Mick michaelkintz...@gmail.com wrote: On Wednesday 04 Jan 2012 12:33:06 you wrote: Hi, I have some firewalls that puts an subjectAltName X509v3 attribute into the CSR, but when I sign them with my openssl CA

Re: [openssl-users] Re: stateOrProvinceName field problem when signing CSR

2011-12-29 Thread Mick
On Thursday 29 Dec 2011 04:46:26 you wrote: From: owner-openssl-us...@openssl.org On Behalf Of Mick Sent: Monday, 26 December, 2011 14:01 snip: CA-vs-EE DN string types I seem to have overcome the original problem. Now both the cacert and signed client certificates are formatted

Re: [openssl-users] Re: stateOrProvinceName field problem when signing CSR

2011-12-29 Thread Mick
On Thursday 29 Dec 2011 10:03:01 Mick wrote: On Thursday 29 Dec 2011 04:46:26 you wrote: PUT such comments. You can avoid editing a copy by: awk '/-BEGIN/,/-END/' filewithextra | openssl asn1parse on any *nix, and on Windows if you add an awk port. Just tried this and all certs

Re: [openssl-users] Re: stateOrProvinceName field problem when signing CSR

2011-12-26 Thread Mick
On Friday 16 Dec 2011 18:31:01 you wrote: Le 16/12/2011 18:45, Mick a écrit : Since I cannot change the router firmware, what should I change the 'string_mask = ' on the PC to agree with the router? My understanding is that string_mask is used when producing an object (request

Re: [openssl-users] Re: stateOrProvinceName field problem when signing CSR

2011-12-18 Thread Mick
On Friday 16 Dec 2011 18:31:01 you wrote: Le 16/12/2011 18:45, Mick a écrit : [...] Since I cannot change the router firmware, what should I change the 'string_mask = ' on the PC to agree with the router? My understanding is that string_mask is used when producing an object (request

Re: [openssl-users] Re: stateOrProvinceName field problem when signing CSR

2011-12-18 Thread Mick
On Sunday 18 Dec 2011 18:10:55 Mick wrote: On Friday 16 Dec 2011 18:31:01 you wrote: Le 16/12/2011 18:45, Mick a écrit : [...] Since I cannot change the router firmware, what should I change the 'string_mask = ' on the PC to agree with the router? My understanding

Re: [openssl-users] Re: stateOrProvinceName field problem when signing CSR

2011-12-18 Thread Mick
On Monday 19 Dec 2011 06:45:13 Mick wrote: On Sunday 18 Dec 2011 18:10:55 Mick wrote: On Friday 16 Dec 2011 18:31:01 you wrote: Le 16/12/2011 18:45, Mick a écrit : [...] Since I cannot change the router firmware, what should I change the 'string_mask = ' on the PC to agree

Re: stateOrProvinceName field problem when signing CSR

2011-12-16 Thread Mick
On Friday 16 Dec 2011 11:31:59 you wrote: (Sorry, accidentally hit send, ignore previous mail) On 12/15/2011 11:01 PM, Mick wrote: Hi All, I've generated a cakey.pem and cacert.pem on my PC. Uploaded the cacert.pem to my router and used its gui to generate a CSR. When I try

Re: How to create pfx-file from pem-file (with signed certificate) and private key ?

2011-12-16 Thread Mick
without going through an intermediate PKCS#12 files. Steve. Not sure if the OP has seen this or if they meet his needs: https://github.com/rae/build-openssl-iphone -- Regards, Mick signature.asc Description: This is a digitally signed message part.

Re: [openssl-users] Re: stateOrProvinceName field problem when signing CSR

2011-12-16 Thread Mick
the original OP problem? -- Regards, Mick signature.asc Description: This is a digitally signed message part.

Re: [openssl-users] Re: stateOrProvinceName field problem when signing CSR

2011-12-16 Thread Mick
On Friday 16 Dec 2011 17:27:42 you wrote: On 12/16/2011 6:14 PM, Erwann Abalea wrote: Le 16/12/2011 17:57, Mick a écrit : On Friday 16 Dec 2011 16:23:52 you wrote: man req Then look for the -utf8 argument. I took your example below, added -utf8 argument, and it worked. You can

stateOrProvinceName field problem when signing CSR

2011-12-15 Thread Mick
stateOrProvinceName = match organizationName= match organizationalUnitName = optional commonName = supplied emailAddress= optional but given that the entries are the same, I am not sure why I get this error. Any suggestions? -- Regards, Mick signature.asc

Re: Please take me off

2008-03-17 Thread Mick
originally subscribed to the list with. -- Regards, Mick signature.asc Description: This is a digitally signed message part.

Re: Please take me off

2008-03-17 Thread Mick
openssl-users or from another account, besides [EMAIL PROTECTED]: ** unsubscribe openssl-users [EMAIL PROTECTED] I think that's quite clear. On 3/17/08, Mick [EMAIL PROTECTED] wrote: On Monday 17 March 2008, navneet Upadhyay wrote: me too On 3/17/08, Pawlicki, John (NY) [EMAIL

Re: Accessing encrypted messages after cert expires

2008-03-16 Thread Mick
, but don't renew the certificate for the same key forever.) Thanks guys! I have understood the principle of this now. Let's hope that I will not mess things up when I migrate from this PC to another and lock myself out of accessing my (older) docs and emails. -- Regards, Mick signature.asc

Re: Accessing encrypted messages after cert expires

2008-03-15 Thread Mick
it to another private key. Keeping the same key overcomes this problem. Have I got this right? Why is it not feasible to retain the same private key? -- Regards, Mick signature.asc Description: This is a digitally signed message part.

Accessing encrypted messages after cert expires

2008-03-14 Thread Mick
client to decrypt and read the file and message that I encrypted previously, with the since expired cert? -- Regards, Mick signature.asc Description: This is a digitally signed message part.

Re: Accessing encrypted messages after cert expires

2008-03-14 Thread Mick
On Friday 14 March 2008, Patrick Patterson wrote: Hi Mick: On Friday 14 March 2008 16:43:28 Mick wrote: Hi All, I am not sure what happens under the following scenario. I use an SSL certificate (e.g. from CaCert.org) to encrypt and sign a file and or an email message. Later

Re: Openssl compile

2007-10-25 Thread Mick
. Can't you just mv the lib files to another place and then rerun the installation? -- Regards, Mick smime.p7s Description: S/MIME cryptographic signature

Re: Generating a smime certificate

2007-05-28 Thread Mick
. In index.txt I have an entry field that says unknown: V 080527095411Z 01 unknown /C=GB/ST=... Do you know how this is can be edited/where is it being red from? -- Regards, Mick pgp3aXfIAfkBu.pgp Description: PGP signature

Re: Generating a smime certificate

2007-05-28 Thread Mick
? Look at: http://www.nabble.com/Database-file-structure-tf3810867.html Thank you very much for all your help! Now, if I could only make Kmail to work with smime ;) -- Regards, Mick pgpyvEA4QcnfW.pgp Description: PGP signature

Re: Generating a smime certificate

2007-05-27 Thread Mick
On Sunday 27 May 2007 03:38, Victor Duchovni wrote: On Sun, May 27, 2007 at 12:13:38AM +0100, Mick wrote: On Saturday 26 May 2007 21:38, Victor Duchovni wrote: On Sat, May 26, 2007 at 10:11:08PM +0200, Marek Marcola wrote: $ openssl x509 -in cert.pem -text -noout

Generating a smime certificate

2007-05-26 Thread Mick
at a loss as to why this happens. Can you please suggest ways for troubleshooting it? -- Regards, Mick pgpHhANzYl8Ca.pgp Description: PGP signature

Re: Generating a smime certificate

2007-05-26 Thread Mick
[ usr_cert ] and also checked that the same line was uncommented under the section [ v3_req ]. However, I am getting the same error. :( This is so frustrating. Anything else I could check? -- Regards, Mick pgptfliThZJR9.pgp Description: PGP signature

Re: Generating a smime certificate

2007-05-26 Thread Mick
: Digital Signature, Non Repudiation, Key Encipherment . . OK, I don't have any X509v3 extensions! Would these be created by default? I haven't really altered my default openssl.cnf to any extent and definitely not commented out any parts of it. -- Regards, Mick

Re: Generating a smime certificate

2007-05-26 Thread Mick
Usage: Digital Signature, Non Repudiation, Key Encipherment . Perhaps a mini-ca will help. See ca.sh, cert.sh and openssl.cnf used as follows: [snip] Thanks Victor, Can you see anything amiss with my attached openssl.cnf? -- Regards, Mick # # OpenSSL example configuration

Re: Unabe to create multiple certificates from a single self-signed CA.

2007-05-23 Thread Mick
. The man page suggests different parsing options to check the contents of certs; e.g. -purpose, etc. -- Regards, Mick pgpJiK8c2mMIZ.pgp Description: PGP signature

Re: Unabe to create multiple certificates from a single self-signed CA.

2007-05-22 Thread Mick
/openssl.cnf file with your default settings will help automate the process and minimise the option entries on the command line. -- Regards, Mick pgpwqq2sjm5Z1.pgp Description: PGP signature

Re: Using OpenSSL certs in Kmail

2007-05-22 Thread Mick
On Monday 21 May 2007 22:56, Mick wrote: I have created a PKCS12 certificate and imported it into Kmail. However, when I try to select it as the preferred key for my email account, it comes up with a red x across the key symbol. I take this to mean that it is unsuitable. When I check

Using OpenSSL certs in Kmail

2007-05-21 Thread Mick
: No Any ideas what I've done wrong? -- Regards, Mick pgpdwzzLlEOuO.pgp Description: PGP signature

No Subject

2000-10-26 Thread Mick McLane
NowComm, Inc. Mick McLane 1012 Golden Grove Lane Florence, KY 41042 859-371-8784 Voice 859-371-6233 Fax We buy/sell/lease new/used/refurbished computer and networking equipment. Call us if you have surplus equipment you would like to sell. Primary products include: Cisco, Motorola, Paradyne