Re: [OpenCA-Devel] Minimum key size for PKCS#10 requests

2005-02-26 Thread Ives Steglich
Alamood, Bahaaldin wrote: still enforcing the rest. If you guys think that this is a good Idea then I could submit it to the CVS. please also update the CHANGES file and submit to cvs too ;) greetings dalini --- SF email is sponsored by - The I

Re: [OpenCA-Devel] Minimum key size for PKCS#10 requests

2005-02-25 Thread Michael Bell
Alamood, Bahaaldin wrote: I think it is a good idea. I would like to see it be in the 0.9.2 branch. I have a local modification to this function where it will enforce the attribute type but not the value. For example I want my users to have a dn with this kind of structure DN: CN=someName, OU=someO

Re: [OpenCA-Devel] Minimum key size for PKCS#10 requests

2005-02-25 Thread Michael Bell
Martin Bartosch wrote: Question: should I submit this extension to the 0.9.2 branch or should I keep this change as a local modification for our project only? Commit it. Michael -- ___ Michael BellHumboldt-Universitaet

RE: [OpenCA-Devel] Minimum key size for PKCS#10 requests

2005-02-25 Thread Alamood, Bahaaldin
Martin, I think it is a good idea. I would like to see it be in the 0.9.2 branch. I have a local modification to this function where it will enforce the attribute type but not the value. For example I want my users to have a dn with this kind of structure DN: CN=someName, OU=someOU, L=" Any locali

[OpenCA-Devel] Minimum key size for PKCS#10 requests

2005-02-25 Thread Martin Bartosch
Hi, the function checkPkcs10_req in pkcs10_req performs some checks on the DN of an incoming PKCS#10 request. I would like to add an additional check that compares the keysize of an incoming request against a configurable minimum keylength (in order to prevent 512 Bit requests). This would requi