Re: Cisco IPSEC certs & keys

2000-02-12 Thread openssl
You were right, converting the strings from hex to binary and treating it in DER form works great. The first line isn't the fingerprint though, but the serial number. Thanks for the help :) > > I'm configuring a few cisco routers to do IKE for our VPN's. Works great > > with pre-shared keys, b

Re: Cisco IPSEC certs & keys

2000-02-12 Thread Vadim Fedukovich
On Fri, Feb 11, 2000 at 04:43:48PM -0800, [EMAIL PROTECTED] wrote: > > I'm configuring a few cisco routers to do IKE for our VPN's. Works great > with pre-shared keys, but for scalability purposes I'd like to use > certificates, which requires the use of a CA. But the ciscos store keys > and cert

Re: duplicating EVP_PKEY's

2000-02-12 Thread Dr Stephen Henson
James wrote: > > > dear all, > > > > i'm wrapping some of the functionality of the openssl library into a > > set of C++ classes (as something to do really :) and i've hit a slight > > snag: i can't find any way of duplicating EVP_PKEY instances! is there > > a function similar to X509_dup() for

Re: unable to read thawte certificate....

2000-02-12 Thread Dr Stephen Henson
Jim Warren wrote: > > I recently got a certificate from thawtewhen I try to start apache, I > get this error: > > openSSL: error:ODO9F007: asn1 encoding routines: d2i_X509: expecting asn1 > sequences > > I have not yet been able to find any info about the error can anyone > shed any lig

unable to read thawte certificate....

2000-02-12 Thread Jim Warren
I recently got a certificate from thawtewhen I try to start apache, I get this error: openSSL: error:ODO9F007: asn1 encoding routines: d2i_X509: expecting asn1 sequences I have not yet been able to find any info about the error can anyone shed any light on this? Jim Warren