RE: How to place signature into an X509 format

2012-10-07 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of redpath > Sent: Saturday, 06 October, 2012 18:59 > I have created EC Digital Signature and saved it in a file. > And I use this signature file to verify a message digest later using a > public key. You don't say, but I assume this signature i

RE: simple server with using openssl

2012-10-07 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Matthias Apitz > Sent: Sunday, 07 October, 2012 02:36 > El día Saturday, October 06, 2012 a las 01:37:06PM -0400, > Indtiny s escribió: > > > Hi, > > Thanks for the information .. I get the server part from > the this link > > http://www.rtfm

RE: Best practice for client cert name checking

2012-10-07 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Jeffrey Walton > Sent: Saturday, 06 October, 2012 19:11 > On Sat, Oct 6, 2012 at 5:41 PM, Charles Mills > wrote: > > Thanks. I'm a relative newbie to this whole topic. Can you > point me to a resource that describes "pin" in the sense you >

RE: Best practice for client cert name checking

2012-10-07 Thread Charles Mills
Trying to achieve client authentication. Should I have said "certificate signed by a CA known to the server"? Charles -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Ben Laurie Sent: Saturday, October 06, 2012 10:38 AM To: op

Re: Best practice for client cert name checking

2012-10-07 Thread Ben Laurie
On Sat, Oct 6, 2012 at 2:52 PM, Charles Mills wrote: > I have recently written a product that incorporates SSL/TLS server code that > processes client certificates. I designed what I thought made sense at the > time but now I am wondering if what I did was best. > > In the product's configuration

Re: simple server with using openssl

2012-10-07 Thread Indtiny s
Hi, Thanks.. I tried that it works ... Now let me know how to use it for my application .. I need a very simple webserver which receive the* https post and ge*t request from any *external client* . and provide proper response to the client .. In my application maximum clients would be two .