Re: CRL in OpenSSL 0.9.6c

2002-03-09 Thread Boguslaw Brandys
Thank You. But since I use Borland C++ Builder to compile OpenSSL and still it is broken to make DLL's with this compiler is any DLL's of 0.9.7 version compiled with VC++ available for download ? Or maybe this problem is corrected wit 0.9.7 version (I wish so...) Best Regards Boguslaw - Ori

Re: CRL in OpenSSL 0.9.6c

2002-03-09 Thread Dr S N Henson
Bogus³aw Brandys wrote: > > Hello, > > I have one question about CRL: is X509_verify_cert parse CRL list ? > I had try to use X509_STORE_load_locations to load CRL file with revokation > of certificate which is used for signing. Surpsise is that verify is always > successful neither certificate

Revocation list usage (CRL)

2002-03-09 Thread Bogusław Brandys
hello, I have such a code in my signing DLL: int verifycert(X509 *x509) { /* Return values: 0 - certificate is VALID -1 - certificate is INVALID ,REVOKED or EXPIRED . */ int exitcode,i; unsigned char *c = ROOT_certificate; X509 *root = d2i_X509(NULL,&c,sizeof(ROO

Re: Hard-coded trusted CA-cert

2002-03-09 Thread Boguslaw Brandys
Hello, I'm newbie but now I can hardcode root certificate.Thank You! Still one question : X509 *x; .. X509_free(x); //do I must call this ? Also any example how to read certificate to/and from memory buffer would be nice. ;-) Boguslaw Brandys - Original Message - From: "

CRL in OpenSSL 0.9.6c

2002-03-09 Thread Bogusław Brandys
Hello, I have one question about CRL: is X509_verify_cert parse CRL list ? I had try to use X509_STORE_load_locations to load CRL file with revokation of certificate which is used for signing. Surpsise is that verify is always successful neither certificate is signed as revoked in CRL or not. Ma

Re: Creating a SSL Certificate

2002-03-09 Thread Huibert Kivits
Hi Eugenio, Creating SSL certificates is the raison d'etre of OpenSSL. So yes, that's possible. About domain names: you are confusing the domain name (like "example.com") with the common name (like "www.example.com"). The common name is the same as the name of your webserver. If you create a

Creating a SSL Certificate

2002-03-09 Thread Eugenio Pacheco
Hi, Is it possible to create a SSL Certificate using openssl? I didn't quite understand what these certificates are for. Usually SSL Certificates ask for a domain name so it can be associated with it, and I didn't get anywhere asking me for a domain name. How can I create a SSL Certificate using

Re: Client private-key and certificate w IE Browser

2002-03-09 Thread Dr S N Henson
Amodhini U wrote: > > Hi, > > > Could you please help me? Specifically, how can I > import a PKCS#8 private-key into the local IE > Browser's security database? > (After that, importing the associated local > certificate in .der or .cer format should be plain > sailing.) > You can't. AFAIK I

Client private-key and certificate w IE Browser

2002-03-09 Thread Amodhini U
Hi, Using OpenSSL I've created a (RSA algorithm) Root private-key and associated (X.509v3) Root CA certificate. On each user (client) (Windows) machine I've been happily creating, again using OpenSSL, a private-key and associated client certificate (issued by my above Root CA in response to a CS

RE: I need to know how to generate a certificate in pkcs7 format withopenSSL

2002-03-09 Thread Tom Tang
It is in apps directory -Original Message- From: GOLDING,CHARLTON (Non-HP-Corvallis,ex1) [mailto:[EMAIL PROTECTED]] Sent: Friday, March 08, 2002 2:21 PM To: '[EMAIL PROTECTED]' Subject: RE: I need to know how to generate a certificate in pkcs7 format withopenSSL Chet Golding Hewlett-Pac