[openssl-users] OpenSSL responder as a CGI

2016-06-17 Thread Dan Mahoney, System Admin
Hey there all, I'm using SSL as part of puppet, which has its own sort of CA. Puppet has no idea about OCSP, but on the master, it leaves most of its configuration to the apache backend. Since apache won't re-read a CRL unless restarted, OCSP seemed like a good answer to this. Puppet's CA

Re: Actually supporting ipv6 literals in s_client?

2013-03-20 Thread Dan Mahoney, System Admin
On Sun, 10 Mar 2013, Dan Mahoney, System Admin wrote: Hey there, Apparently supporting ipv6 literals... like openssl s_client -connect '[2001:4f8:0:2::d]:443' ..in s_client is oft-asked for but never-implemented, to the point where there are blog articles like this out there: https

Actually supporting ipv6 literals in s_client?

2013-03-10 Thread Dan Mahoney, System Admin
Hey there, Apparently supporting ipv6 literals... like openssl s_client -connect '[2001:4f8:0:2::d]:443' ..in s_client is oft-asked for but never-implemented, to the point where there are blog articles like this out there: https://lwn.net/Articles/486369/, and most OSes that want to support

Re: I got Geotrust CERT but have No Key (?)

2004-09-10 Thread Dan Mahoney, System Admin
On Fri, 10 Sep 2004, Ryan Beisner (AE) wrote: https://www.geotrust.com/news_events/press/pr_reissues_083004.htm Well, apparantly they only send the CERT, not the KEY. Now you have to log into their web site to retrieve the corresponding KEY. So, now you know if you ever get one via Bulkregister.