OCSP module for Apache

Hello, We are working with a Engineering school to devellop a free OCSP module for Apache. Does somebody have some documentation how to start with this work ? Many Thanks, Sylvain Sylvain M

Re: free OCSP-responder

Hello Andre, You can also use www.openvalidation.org. It offer a nice OCSP Responder for test issue. In fact the product behind is from Sytrust. Sylvain Sylvain Maret Senior Security Enginee

Re: Please help me!

Hello Ryan! Thank you very much. I have added the line in the Certificate Extensions section of my openssl.cnf file: crlDistributionPoints=URI:http://cert.vrn.ru/crl/main.crl and then I made some certificates with this extensions. Such certificates have the following value of CRL Distribution

keyUsage - Documentation

Hi everybody, I'm in search of a full description of the keyUsage-options (digitalSignature, nonRepudiation etc.). Who can help me ? Patrick __ OpenSSL Project http://www.openssl.org User Support

Random number generation

Hi, I am looking for an powerful random number generation library for an application. Is open ssl has such library. ( not pseudo random generations ) Is anyone know ? Regards Ashada __ OpenSSL Project

Re: Random number generation

On Thu, Sep 27, 2001 at 03:18:49PM +0600, Ashada Karunaratna wrote: > I am looking for an powerful random number generation library for an > application. Is open ssl has such library. ( not pseudo random generations ) > Is anyone know ? If your under Unix, why not use /dev/random or /dev/urandom

Re: Client Authentication Problem

Eric Rescorla wrote: > > Götz Babin-Ebell <[EMAIL PROTECTED]> writes: > > And how gets he the connection IP-Address <-> FQDN ? > > ->He uses DNS. > I think you need to reread his message since that's not > what he says. Hm: client authentication. After a successful SSL_accept() I have some lo

Certificate Problem with Sendmail

Folks, I'm evaluating the use of Sendmail with TLS for a client. I'm using Sendmail 8.11.6 and openssl 0.9.6b, running under Solaris 2.6 I've created a CA, and a server certificate, apparently successfully. When I try and start Sendmail using these, though, I get the following errors in the log

¶Ô»áÔ±µ¥Î»Ìṩ²ÎÕ¹²¹ÌùµÄ֪ͨ

¹ØÓڶԲμÓ"2001ÄêÖйú£¨Î人£©¹ú¼ÊÐÅÏ¢¼¼Êõ²©ÀÀ»á"µÄ»áÔ±µ¥Î»Ìṩ²ÎÕ¹²¹ÌùµÄ֪ͨ ÉîÛÚÊиßм¼Êõ²úҵЭ»á£¬½«×éÖ¯ÉîÛÚÊеĸßм¼ÊõÆóÒµ³öϯ²Î¼Ó"2001ÄêÖйú£¨Î人£©¹ú¼ÊÐÅÏ¢¼¼Êõ²©ÀÀ»á" Э»á±¾×ÅΪ¸÷»áÔ±µ¥Î»·þÎñµÄ×ÚÖ¼£¬ÎªÁËÀ©´óºÍ¼ÓÇ¿ÎÒÊиßм¼ÊõÆóÒµ¶ÔÍâµÄ½»Á÷ÓëºÏ×÷£¬´Ù½øÎÒÊиßм¼ÊõÆóÒµÍØÕ¹ÒµÎñ¡¢¿ª·¢Êг¡£¬±¾Ð­

RE: Please help me!

Valery -- I am not sure if this is your problem also but I can not get http://cert.vrn.ru/crl/main.crl however I can get http://proxy.vrn.ru/crl/main.crl I would make your DP point to that. Ryan -Original Message- From: Valery [mailto:[EMAIL PROTECTED]] Sent: Thursday, Septembe

RE: Random number generation

If you are looking for a software based solution the OpenSSL PRNG library is good. There any many interesting software solutions for gathering seed for the PRNG as well, egd.pl will use a plethora of system information (on unix) to provide seed. However hardware based entropy solutions are a bett

Re: keyUsage - Documentation

Patrick Hachenberg wrote: > > Hi everybody, > > I'm in search of a full description of the > keyUsage-options (digitalSignature, nonRepudiation > etc.). > > Who can help me ? > Try the FAQ. Steve. -- Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/ Personal Email: [EMAIL PROT

Re: OCSP module for Apache

[EMAIL PROTECTED] wrote: > > Hello, > > We are working with a Engineering school to devellop a free OCSP > module for Apache. Does somebody have some documentation how to start > with this work ? > OpenSSL has a test OCSP responder already, the source to that (apps/ocsp.c) would be a good plac