AW: AW: CSR signing

2004-10-28 Thread thomas . beckmann
Ah, now I know where the concatenation idea comes from ;-) -Ursprüngliche Nachricht- Von: Dr. Stephen Henson [mailto:[EMAIL PROTECTED] Gesendet: Mittwoch, 27. Oktober 2004 17:43 An: [EMAIL PROTECTED] Betreff: Re: AW: CSR signing On Wed, Oct 27, 2004, Ronan wrote: I'd

Re: signing cerfificates

2004-10-28 Thread Frédéric PAILLETTE
To sign the certificate, you must provide the CA's cert and the CA's private key. This is the command that I use usually: openssl ca -config config.cnf -in new.cer -out user.pem -keyfile ca.pk -cert ca.pem I hope it will help you. Frederic. Jagadeesha T wrote: HI all, I have a

Re: AW: CSR signing

2004-10-28 Thread Ronan
Dr. Stephen Henson wrote: On Wed, Oct 27, 2004, Ronan wrote: I'd suggest you use the CA.pl script instead. That should make things much easier. i have a csr (in pem format(by default)) and a key I want to sign the csr with my domains root CA Where is this root CA and key? If it has been created

RE: openssl-0.9.7 MSVCR70 compatibility problem

2004-10-28 Thread Tõnis
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dr. Stephen Henson On Wed, Oct 27, 2004, Tnis wrote: I'm trying to use OpenSSL ver 0.9.7 e/d version under Windows XP. I'm using MS VC++ .NET 2002 which links libeay32.dll to MSVCR70* runtime. I'm using

more CSR

2004-10-28 Thread Ronan
openssl x509 -in ./demoCA/rtest.csr -CA ./demoCA/cacert.pem -CAkey ./demoCA/private/cakey.pem -CAserial ./demoCA/serial -out ./demoCA/rtest.pem unable to load 'random state' This means that the random number generator has not been seeded with much random data. Consider setting the RANDFILE

what is the difference between get and post with ssl?

2004-10-28 Thread 黄志军
Version: apache-1.3.28 mod_ssl-2.8.15 openssl-0.9.6h[engine] i execute the test.html in internet explorer and it return a correct index1.html page. But if i change the method from 'get' to 'post', it return the message " Method Not Allowed The requested method POST is not allowed for the

Re: what is the difference between get and post with ssl?

2004-10-28 Thread Richard Levitte - VMS Whacker
In message [EMAIL PROTECTED] on Thu, 28 Oct 2004 18:10:35 +0800, [EMAIL PROTECTED] said: hzhijun Version: apache-1.3.28 mod_ssl-2.8.15 openssl-0.9.6h[engine] hzhijun hzhijun i execute the test.html in internet explorer and it return a hzhijun correct index1.html page. But if i change the

Re: more CSR

2004-10-28 Thread Ronan
Ronan wrote: openssl x509 -in ./demoCA/rtest.csr -CA ./demoCA/cacert.pem -CAkey ./demoCA/private/cakey.pem -CAserial ./demoCA/serial -out ./demoCA/rtest.pem unable to load 'random state' This means that the random number generator has not been seeded with much random data. Consider setting the

Re: AW: CSR signing

2004-10-28 Thread Dr. Stephen Henson
On Thu, Oct 28, 2004, Ronan wrote: Dr. Stephen Henson wrote: On Wed, Oct 27, 2004, Ronan wrote: I'd suggest you use the CA.pl script instead. That should make things much easier. i have a csr (in pem format(by default)) and a key I want to sign the csr with my domains root

Solaris make install problems for 0.9.7e

2004-10-28 Thread Chris Pitchford
I'm also experiencing the same problem on solaris 2.6 through 9 as mentioned in thread make install fails on solaris sparc 8 for 0.9.7e http://www.mail-archive.com/[EMAIL PROTECTED]/msg37703.html This did not happen on 0.9.7d, which I built using the same command line During a make install it

Re: Solaris make install problems for 0.9.7e

2004-10-28 Thread Robert Bannocks
I get this too if you quote the $(EXHEADER) to be $(EXHEADER) in the install section of the files listed below it compiles and installs ok. Files: ./fips/aes/Makefile ./fips/des/Makefile ./fips/dh/Makefile ./fips/dsa/Makefile ./fips/rsa/Makefile ./fips/sha1/Makefile Looks as though it is time

Re: more CSR

2004-10-28 Thread Charles B Cranston
Actually you might be confused a little. A CSR is nothing more than a public key bundled with an identity (name). If you already have a CSR you should not also need a public key. If you mean the key to be the private key to a signing CA and the CSR to be for an end-user certificate to be SIGNED

Re: what is the difference between get and post with ssl?

2004-10-28 Thread Charles B Cranston
Richard Levitte - VMS Whacker wrote: In message [EMAIL PROTECTED] on Thu, 28 Oct 2004 18:10:35 +0800, [EMAIL PROTECTED] said: hzhijun i execute the test.html in internet explorer and it return a hzhijun correct index1.html page. But if i change the method from hzhijun 'get' to 'post', it

Re: Solaris make install problems for 0.9.7e

2004-10-28 Thread empty body
excellent! that worked. thanks for your help. On Thu, 28 Oct 2004 15:13:14 +0100, Robert Bannocks [EMAIL PROTECTED] wrote: I get this too if you quote the $(EXHEADER) to be $(EXHEADER) in the install section of the files listed below it compiles and installs ok. Files:

Re: Debugging OpenSSL in DDD

2004-10-28 Thread Jacques Thomas
Hi, I've actually just been running openssl in ddd 2 days ago. Here' the basic configuration I use: ./Configure --openssldir=where I want openssl 386 linux-elf To compile openssl with the support for debugging ./Configure --openssldir=path/to/openssl/with/debugging 386 linux-elf:gcc -g build,

Re: Solaris make install problems for 0.9.7e

2004-10-28 Thread Carson Gaspar
--On Thursday, October 28, 2004 15:13:14 +0100 Robert Bannocks [EMAIL PROTECTED] wrote: I get this too if you quote the $(EXHEADER) to be $(EXHEADER) in the install section of the files listed below it compiles and installs ok. This will break if EXHEADER is _not_ empty. The following snippet