Re: OpenPG/X.509 interoperability

2005-11-02 Thread Lionel Elie Mamane
On Mon, Oct 31, 2005 at 12:36:13AM +0100, Christoph Anton Mitterer wrote: What about the two big free X.509 suppliers (CACert and Thawte) do they sign OpenPGP keys? Thawte used to, but doesn't anymore. CACert does. -- Lionel ___ Gnupg-users

Re: OpenPG/X.509 interoperability

2005-11-01 Thread Henning Hucke
On Mon, 31 Oct 2005, Werner Koch wrote: On Mon, 31 Oct 2005 00:36:13 +0100, Christoph Anton Mitterer said: This is perhaps a stupid question but how far are these two standards interoperable? They are not interoperable. Depends on what you rate to be interoperable (see below). Can

Re: OpenPG/X.509 interoperability

2005-11-01 Thread Werner Koch
On Mon, 31 Oct 2005 16:42:48 +0100, Christoph Anton Mitterer said: What do you mean by private extension? OpenPGP defines identifier ranges for private and experimental use. Salam-Shalom, Werner ___ Gnupg-users mailing list

Re: OpenPG/X.509 interoperability

2005-11-01 Thread Werner Koch
On Tue, 1 Nov 2005 19:56:25 +0100 (CET), Henning Hucke said: X.509 as well as OpenPGP are just package aroung the product. You can use the private and public keys themselfs to package them as OpenPGP or X.509. So this way you can have one and the same key pair to work in both worlds.

Re: OpenPG/X.509 interoperability

2005-10-31 Thread Werner Koch
On Mon, 31 Oct 2005 00:36:13 +0100, Christoph Anton Mitterer said: This is perhaps a stupid question but how far are these two standards interoperable? They are not interoperable. Can X.509 certificates be used to sign/certificate OpenPGP UIDs? No. You can add a private extension to do

Re: OpenPG/X.509 interoperability

2005-10-31 Thread Christoph Anton Mitterer
Werner Koch wrote: Can X.509 certificates be used to sign/certificate OpenPGP UIDs? No. You can add a private extension to do so. What do you mean by private extension? Chris. (from now on,.. imply my best wishes =) ) begin:vcard fn:Mitterer, Christoph Anton n:Mitterer;Christoph

OpenPG/X.509 interoperability

2005-10-30 Thread Christoph Anton Mitterer
Hi. This is perhaps a stupid question but how far are these two standards interoperable? I've seen a document that proposes some things in that area (http://www.imc.org/ietf-openpgp/mail-archive/msg09930.html). My question now: Can X.509 certificates be used to sign/certificate OpenPGP

Re: OpenPG/X.509 interoperability

2005-10-30 Thread Christoph Anton Mitterer
Alaric Dailey wrote: CAcert offers a GPG signature if your persona has been verified, and I wrote this as well. http://wiki.cacert.org/wiki/ConvertingCertificateToPgp Uhm,.. but that way I create a NEW key,... correct? I was looking for a signature for my EXISTING key. if this doesn't