Re: X509.v3 constraints

2002-10-24 Thread Rich Salz
> How do you place a constraint on a certificate to allow it to sign only > certificate lower in X400 naming scheme, or containing a special naming > scheme... Your best way to get a reasonable understanding of this is to read the IETF PKIX profile. For example, http://www.ietf.org/rfc/rfc3280.tx

X509.v3 constraints

2002-10-24 Thread Franck Martin
I have read in the doc on X509v3 that you can place a constraint on nearly anything... How do you place a constraint on a certificate to allow it to sign only certificate lower in X400 naming scheme, or containing a special naming scheme... Franck Martin Network and Database Development Officer S

padding problem

2002-10-24 Thread Aonzo Emanuele
Hi, I have a problem with RSA padding. I'm trying to generate a "low level" signature with a smart card using the functions RSA_private_encrypt. I think the Smart card RSA padding is wrong because the decryption (RSA_public_decrypt() ) not return the exact value of the digest but it returns a buffe

OCSP command for 0.9.6g

2002-10-24 Thread Howard Chan
Hello all,   I'd like to inquire about whether or not there is support for the command OCSP in openssl version 0.9.6g.  I've read online about a patch involved, and noticed that there are tarballs for 0.9.5a and b versions which will give you the ocsp.c application.  Untarring the tarball gi

Re: CMP support

2002-10-24 Thread Vadim Fedukovich
On Wed, Oct 23, 2002 at 05:50:09PM +0400, Andrew Abramov wrote: > Andrew.Abramov>> And another question about additional stuff. Does the > Andrew.Abramov>> openssl support CMP? Can it generate and parse this > Andrew.Abramov>> kind of messages? > > RLVW> No. > > And does anybody know, what softwa