Re: Generating a smime certificate

2007-05-28 Thread Mick
On Monday 28 May 2007 17:34, Marek Marcola wrote: > Hello, > > > However, there's something else I noticed. In index.txt I have an entry > > field that says "unknown": > > > > V 080527095411Z 01 unknown /C=GB/ST=... > > > > Do you know how this is can be edited/where is it bei

Re: Generating a smime certificate

2007-05-28 Thread Marek Marcola
Hello, > However, there's something else I noticed. In index.txt I have an entry > field > that says "unknown": > > V 080527095411Z 01 unknown /C=GB/ST=... > > Do you know how this is can be edited/where is it being red from? Look at: http://www.nabble.com/Database-file-s

Re: Generating a smime certificate

2007-05-28 Thread Mick
On Sunday 27 May 2007 23:40, Marek Marcola wrote: > When issuing certificate you will see certificate details > with (or without :-) keyUsage information: > > $ openssl ca -config openssl.cnf -in req.pem Thank you Marek! Using openssl ca with -verbose did all sort of checks and was quite info

Re: Generating a smime certificate

2007-05-27 Thread Marek Marcola
Hello, > On Saturday 26 May 2007 21:38, Victor Duchovni wrote: > > On Sat, May 26, 2007 at 10:11:08PM +0200, Marek Marcola wrote: > > > $ openssl x509 -in cert.pem -text -noout > > > . > > > . > > > X509v3 extensions: > > > X509v3 Basic Constraints: > > > CA:

Re: Generating a smime certificate

2007-05-27 Thread Mick
On Sunday 27 May 2007 03:38, Victor Duchovni wrote: > On Sun, May 27, 2007 at 12:13:38AM +0100, Mick wrote: > > On Saturday 26 May 2007 21:38, Victor Duchovni wrote: > > > On Sat, May 26, 2007 at 10:11:08PM +0200, Marek Marcola wrote: > > > > $ openssl x509 -in cert.pem -text -noout > > > > . > >

Re: Generating a smime certificate

2007-05-26 Thread Victor Duchovni
On Sun, May 27, 2007 at 12:13:38AM +0100, Mick wrote: > On Saturday 26 May 2007 21:38, Victor Duchovni wrote: > > On Sat, May 26, 2007 at 10:11:08PM +0200, Marek Marcola wrote: > > > $ openssl x509 -in cert.pem -text -noout > > > . > > > . > > > X509v3 extensions: > > > X50

Re: Generating a smime certificate

2007-05-26 Thread Mick
On Saturday 26 May 2007 21:38, Victor Duchovni wrote: > On Sat, May 26, 2007 at 10:11:08PM +0200, Marek Marcola wrote: > > $ openssl x509 -in cert.pem -text -noout > > . > > . > > X509v3 extensions: > > X509v3 Basic Constraints: > > CA:FALSE > > X

Re: Generating a smime certificate

2007-05-26 Thread Mick
On Saturday 26 May 2007 21:11, Marek Marcola wrote: > > Check that you really have proper extensions in certificate: > > $ openssl x509 -in cert.pem -text -noout > . > . > X509v3 extensions: > X509v3 Basic Constraints: > CA:FALSE > X509v3 Key Usag

Re: Generating a smime certificate

2007-05-26 Thread Victor Duchovni
On Sat, May 26, 2007 at 10:11:08PM +0200, Marek Marcola wrote: > $ openssl x509 -in cert.pem -text -noout > . > . > X509v3 extensions: > X509v3 Basic Constraints: > CA:FALSE > X509v3 Key Usage: > Digital Signature, Non Repudiatio

Re: Generating a smime certificate

2007-05-26 Thread Marek Marcola
Hello, > On Saturday 26 May 2007 19:55, Marek Marcola wrote: > > Hello, > > > > Some mail systems (eg Lotus Notes) requires proper extensions in > > certificates. Certificates without this extensions are not > > treated as candidates for signing/encryption. > > With default configuration OpenSSL ce

Re: Generating a smime certificate

2007-05-26 Thread Mick
On Saturday 26 May 2007 19:55, Marek Marcola wrote: > Hello, > > Some mail systems (eg Lotus Notes) requires proper extensions in > certificates. Certificates without this extensions are not > treated as candidates for signing/encryption. > With default configuration OpenSSL certificates > are crea

Re: Generating a smime certificate

2007-05-26 Thread Marek Marcola
Hello, Some mail systems (eg Lotus Notes) requires proper extensions in certificates. Certificates without this extensions are not treated as candidates for signing/encryption. With default configuration OpenSSL certificates are created without extensions for signing and encryption. To change thi