how to merge multiple public domain certs into one file?

2009-11-15 Thread M C
Hi... I've been struggling with how to concatenate multiple public domain certs into one crt file. Basically, I have 5 SSL virtual host domains running on 1 apache httpd server and each host has a separate GeoTrust domain certificate. Instead of having 5 individual public *.crt files, is there

Re: how to merge multiple public domain certs into one file?

2009-11-15 Thread Lou Picciano
I didn't think it possible to server multiple virtual SSL domains from one Apache instance (on the same IP, at least). I suppose if you use different IP numbers this constraint goes away. Has something changed about Apache in this regard? Then, you have the matter of: If each virtual SSL

Re: About Crypto Library usage and...

2009-11-15 Thread Mounir IDRASSI
Hi, OpenSSL can definitely be used to implement a port of Crypto API under Linux but I advise you to take a look at Winelib from the Wine project (http://www.winehq.org/winelib). They have implemented, among other things, the whole Crypto API functions along with MS CSPs. Although it's not

Re: how to merge multiple public domain certs into one file?

2009-11-15 Thread ohaya
Hi, Unless I'm misunderstanding things, you *can*, by using ServerName inside each of the VirtualHost sections: http://httpd.apache.org/docs/2.0/vhosts/name-based.html Jim Lou Picciano loupicci...@comcast.net wrote: I didn't think it possible to server multiple virtual SSL domains

Re: Accessing PBKDF2 from command line

2009-11-15 Thread Anthony Thyssen
On Sun, 15 Nov 2009 21:44:55 -0500 Victor Duchovni victor.ducho...@morganstanley.com wrote: | | Subject:Re: Encapsulation of AES_KEY | Date: 2009-11-11 18:49:38 | | The problem is the openssl command does not make this function available | either directly as a password to

Re: Accessing PBKDF2 from command line

2009-11-15 Thread Victor Duchovni
On Mon, Nov 16, 2009 at 01:45:07PM +1000, Anthony Thyssen wrote: In Summery the openssl command is deficient. [ various limitations of enc(1) ] At the end of the day, OpenSSL is a *library*, not an end-user product, and enc(1) and friends are developer utilities and demo tools. When you

RE: how to merge multiple public domain certs into one file?

2009-11-15 Thread Hécber Córdova
Hi *, Certainly you can configure Apache to use virtualHosts based on domain names, and this works perfect with HTTP (1.1). However, this cannot be achieved using SSL, and the answer is simple, the SSL is established using the server IP, and during the SSL negotiation

Re: Accessing PBKDF2 from command line

2009-11-15 Thread Victor Duchovni
On Mon, Nov 16, 2009 at 11:52:26AM +1000, Anthony Thyssen wrote: I was reading the openssl-users mail list, (I am not on that list) where you mentioned the PBKDF2 openssl library function. You should join, at least long enough to ask the question that interests you. Further follow-up will be

RE: how to merge multiple public domain certs into one file?

2009-11-15 Thread ohaya
Hécber and Lou, Oops. I missed the part in the original post about this being for SSL-enabled VirtualHosts :(... Sorry for any confusion... Jim Hécber Córdova hcord...@smartmatic.com wrote: Hi *, Certainly you can configure Apache to use virtualHosts based on domain

RE: how to merge multiple public domain certs into one file?

2009-11-15 Thread Hécber Córdova
Hi, Ok, mod_ssl assume only one server certificate per file (with the exception of the cacert file), and this is because apache doesn't have any way to select the best certificate for a particular virtual host, and only one certificate is assigned for a particular virtual host.

Re: openssl and hardware tokens

2009-11-15 Thread Victor B. Wagner
On 2009.11.13 at 04:44:02 -0800, Mansour Dagher wrote: Hi all, if certificates and associated keys are stored on HW (Sun crypto card for example), is there a way in openssl to specify the card as the location of these certificates/kets? It appears from the methods below, the openSSL

Re: RE: how to merge multiple public domain certs into one file?

2009-11-15 Thread Victor B. Wagner
On 2009.11.15 at 21:01:13 -0500, H??cber C??rdova wrote: Hi *, Certainly you can configure Apache to use virtualHosts based on domain names, and this works perfect with HTTP (1.1). However, this cannot be achieved using SSL, and the answer is simple, the SSL is established