Making Private CA

Hello, I am making my own private CA, using the CA.pl scripts provided under the apps directory of OpenSSL release. I run ./CA.pl -newca It asks for filename, and I enter without giving any. I am prompted for PEM pass phase. I enter some. After which, I

Manufacturing Certs

Hello All, I have to generate a new cert, for which I am making use of X509_new(). This returns a certificate which is not generated from a root certificate. Its a standalone cert. I want to generate a new cert dynamically, making use of a root certificate (a CA cert).

are server certs different from client certs

Hi all, I have created a certificate using the following sequence of calls : X509_new() RSA_generate_key() X509_set_version(cert,3) ASN1_INTEGER_set(X509_get_serialNumber(cert),0) X509_gmtime_adj(X509_get_notBefore(cert),0);

RE: are server certs different from client certs

. Thanks again rsr. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Gotz Babin-Ebell Sent: Wednesday, February 12, 2003 10:38 PM To: [EMAIL PROTECTED] Subject: Re: are server certs different from client certs Hello, Chandrasekhar R S wrote: Hi all

RE: Tunneling Client Certs

It seems I have not explained myself ably. I completly understand that Private Keys should and would never be sent across. But assume that you are going through a proxy using SSL. And the proxy has no capability to verify the certs. That capablity is vested with a server that sits behind the

Tunneling Client Certs

I have posted a similar message earlier. Hoping to convey self better and get some help this time around. I have the following scenario - Client Cert -- Tunnel Server - Tunnel Client -- Backend server. The requirement is to pass the Client Cert to the Backend server. I could extract the

Client authentication

I am to authenticate a client using his certificate. In my server program, I use SSL_CTX_set_verity(ctx, SSL_VERIFY_PEER | SSL_VERIFY_FAIL_IF_NO_PEER_CERT,0) to mandate that client cert should be present. If present, I use SSL_get_peer_certificate(ssl) to retrieve the client cert. In my client

RE: Proxy'ing client certs

Hello Vadim, Localized Scenario : Proxy Client -- Backend Server 5. The requirement is, Proxy Client should be presenting CLIENT CERT to the backend server. Yes, it can present it somehow RSR : I am in search of this somehow. Could it be this

Proxy'ing client certs

I have already posted the following on the lists under Proxy'ing client certs thread. Could not see the posting, hence re-posting. - My understanding had been the following : Client Proxy Server -- Proxy Client

Proxy'ing client certs

I have the following scenario - client-Proxy - server. SSLClient - SSLServer | SSLClient - SSL Server. It is my intent to pass on the clients certificate to the server for verification and acceptance. Since, the