adding x509v3 extensions

2001-04-16 Thread Tim Newsham
Hi, I'm trying to figure out how to add x509v3 extensions using the openssl x509 utility. The man page mentions that the -extfile can be used to specify extensions to be used by a certificate. Looking at the code, it looks like it parses this as a normal conf file, looking in the

Re: adding x509v3 extensions

2001-04-16 Thread Tim Newsham
check out the doc/openssl.txt file. Thanks, that did the trick. This information should probably be put in the man page, or at least referenced by it. As a quick reference for others, the steps I performed to get x509v3 fields I needed are to create a config file: - ext.conf -

Re: Random number generation

2000-11-20 Thread Tim Newsham
Hi, I am a complete novice when it comes to SSL and I have had to = incorporate OpenSSL into my project through use of a CORBA ORB I am = using. I have been advised that I need a random number generator to use = OpenSSL. Is this true, and if so why? I am just trying to understand =

Re: Re: Random number generation

2000-11-20 Thread Tim Newsham
Hi, since I have the same problem and since there is almost no useful documentation available, what I'm supposed to do if there is /dev/random but it blocks? Note: Don't have /dev/urandom. you can read as much as is available, with a non-blocking file descriptor or with FIONREAD. If

Re: Newbie Sample Codes

2000-11-18 Thread Tim Newsham
Hello! Where can I find sample codes using OpenSSL. I have already installed OpenSSL in my FreeBSD box. I have read the documentation, but can't find some sample codes implementing a fully running server implementing ssl, and a fully running client implementing ssl. I was quite