extended key usage

Hi, I'm working with an application that seems to require an X.509 Extended Key Usage of TLS Web Client Authentication. How can I get this extension into my OpenSSL signed certificates? What is the entry in the OpenSSL config file for the Extended Key Usage parameters? Thanks, David

OpenSSL with Apache/PHP

Hi, I'm using Apache2 with PHP4 and OpenSSL-0.9.7a on Linux. I'm trying to sign client certificate requests with PHP script on the server. I have a couple questions. 1) On Linux, how do I tell PHP where the openssl.cnf file is, or where is the default location on Linux? I've tried setting

ssl client authentication

hi, i'm trying to use OpenSSL s_client with OpenSC PKCS#15 engine. the engine works for operations such as key generation and PKCS#1 signatures. i've modified the s_client code to be able to use a private key on the smartcard via the OpenSC engine. i'm running into some problems with

agent for certificate request

hi, i want to sign a certificate request (CSR) on behalf of the requestor. i believe i would be called an agent of the requestor (is that right?). once the agent signs the CSR, i want the CA (or some intermediate program) to verify the agent and then the CA generates the certificate. the CSR

PEM public key format

Hi, Can anyone point me to documentation describing the format of a PEM certificate? I would like to know the order of data in a public certificate, i.e. modulus, exponent, etc. Thanks! David -- David Mattes