Re: Sign public key without having CSR or private key?

2013-02-05 Thread Michael Ionescu
On 07.07.2012 23:27, Dr. Stephen Henson wrote: I added an option -force_pubkey to the OpenSSL 'x509' utility to do this. It is only in HEAD at present. Hi Steve, that's excellent! If I am not mistaken, this is exactly what one would also need in order to use the pubkey in individually

Re: Sign public key without having CSR or private key?

2013-02-05 Thread Dr. Stephen Henson
On Tue, Feb 05, 2013, Michael Ionescu wrote: On 07.07.2012 23:27, Dr. Stephen Henson wrote: I added an option -force_pubkey to the OpenSSL 'x509' utility to do this. It is only in HEAD at present. Hi Steve, that's excellent! If I am not mistaken, this is exactly what one would

Re: Sign public key without having CSR or private key?

2012-07-15 Thread Jeffrey Walton
On Sat, Jul 7, 2012 at 2:27 PM, pro...@secure-mail.biz wrote: Hello, is it possible to sign a foreign SSL public key without having CSR/private key? Background: Because the public root CA's failed at least twice (DigiNotar, Comodo), I'd like to pin a SSL certificate from a website I

Sign public key without having CSR or private key?

2012-07-07 Thread proper
Hello, is it possible to sign a foreign SSL public key without having CSR/private key? Background: Because the public root CA's failed at least twice (DigiNotar, Comodo), I'd like to pin a SSL certificate from a website I have no control over. (Therefore I no access the the private key and can

Re: Sign public key without having CSR or private key?

2012-07-07 Thread Jeffrey Walton
On Sat, Jul 7, 2012 at 2:27 PM, pro...@secure-mail.biz wrote: Hello, is it possible to sign a foreign SSL public key without having CSR/private key? Background: Because the public root CA's failed at least twice (DigiNotar, Comodo), I'd like to pin a SSL certificate from a website I

Re: Re: Sign public key without having CSR or private key?

2012-07-07 Thread proper
-certificate switch. That's why I posted the question Sign public key without having CSR or private key? here. If there are any suggestions for this situation I am all ears. [1] https://blog.torproject.org/blog/diginotar-debacle-and-what-you-should-do-about-it [2] https://trac.torproject.org/projects

Re: Re: Sign public key without having CSR or private key?

2012-07-07 Thread Jeffrey Walton
CA, sign the certificate and run wget with the --ca-certificate switch. That's why I posted the question Sign public key without having CSR or private key? here. If there are any suggestions for this situation I am all ears. Perhaps wget needs to be modified so that it allows you to supply

Re: Re: Sign public key without having CSR or private key?

2012-07-07 Thread Jeffrey Walton
depending on root CA's? The only possible solution I saw was downloading the torproject.org SSL public key, run a local CA, sign the certificate and run wget with the --ca-certificate switch. That's why I posted the question Sign public key without having CSR or private key?. If there are any

Re: Re: Re: Sign public key without having CSR or private key?

2012-07-07 Thread proper
the torproject.org fingerprint [4] without depending on root CA's? The only possible solution I saw was downloading the torproject.org SSL public key, run a local CA, sign the certificate and run wget with the --ca-certificate switch. That's why I posted the question Sign public key without having CSR

Re: Sign public key without having CSR or private key?

2012-07-07 Thread Dr. Stephen Henson
On Sat, Jul 07, 2012, pro...@secure-mail.biz wrote: Hello, is it possible to sign a foreign SSL public key without having CSR/private key? Background: Because the public root CA's failed at least twice (DigiNotar, Comodo), I'd like to pin a SSL certificate from a website I have