Making Private CA

2003-02-17 Thread Chandrasekhar R S
Hello, I am making my own private CA, using the CA.pl scripts provided under the apps directory of OpenSSL release. I run "./CA.pl -newca" It asks for filename, and I enter without giving any. I am prompted for PEM pass phase. I enter some. After which,

Re: r.e. OpenSSL and MacOS (pre-OS X)

2003-02-17 Thread Aram Perez
Hi Rodney, Yes, that happened to me. I didn't delete the files, just moved them to another directory, but then I couldn't boot. I had to boot into single user mode, copy the files back and then I was able to reboot fine. Regards, Aram Rodney Thayer wrote: > At 07:15 AM 2/17/2003 -0800, Aram wr

redirecting input to s_client

2003-02-17 Thread Himanshu Soni
Hi Is there a way to redirect the GET/POST request from a file to the openssl s_client app? something like: cat get.txt | openssl s_client -connect server:443 -cert crtfile -key keyfile The result of the above is that the program exists with "DONE" printed to the console. I have tried the -p

Re: r.e. OpenSSL and MacOS (pre-OS X)

2003-02-17 Thread Rodney Thayer
At 07:15 AM 2/17/2003 -0800, Aram wrote: I've built it with GNU on OS X. The only problem I ran into was the problem stated in the file PROBLEMS, where OS X already has an older version of the OpenSSL libraries. I've done that too. There is, by the way, a serious problem with that workaround.

Re: r.e. OpenSSL and MacOS (pre-OS X)

2003-02-17 Thread Aram Perez
Hi Rodney, Rodney Thayer wrote: > I'm trying to build OpenSSL 0.9.7 on OS X 10.2.3 with CodeWarrior. > I tried using the 'mcp' files in the MacOS directory, but they > don't work. Specifically, they can't find /usr/include/sys/types.h. > > Short of being grumpy the compiler's too clueless to fi

Re: extend validity of existing certificates

2003-02-17 Thread pilsl
Thnx a lot for your detailed answer. I already started following your recommandations and created a new CA.crt based on the given "old" ca.key and also created a new CSR (also based on its "old" key) and signed it with the "new" CA to get a new CRT. The new CRT is perfectly accepted by all clie

RE: extend validity of existing certificates

2003-02-17 Thread Markus Lorch
> > > It is not true, because it is possible to extend the validity of a > certificate, even with openssl. I'd be really curious how you accomplish this, other than the solution below ... which creates a new cert request which becomes a new cert after the cert request has been signed I.e. a PKC

Re: extend validity of existing certificates

2003-02-17 Thread Hotmail
It is not true, because it is possible to extend the validity of a certificate, even with openssl. You have to create a new certification request, with an extended period of time. Rossi - Original Message - From: "Markus Lorch" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, F

RE: extend validity of existing certificates

2003-02-17 Thread Markus Lorch
> > On my little system I've three types of self created certificates that > will all expire this year (I didnt pay much attention to expiration > when first creating them). > > I'm now looking for a way how to extend this validity without > recreating the > certificates and therefore breaking e

Re: OpenSSL 0.9.6/0.9.7 library version conflicts

2003-02-17 Thread Terry Lambert
Vivek Khera wrote: > > "TL" == Terry Lambert <[EMAIL PROTECTED]> writes: > TL> not being overridden, even when the library path is. This is > TL> most likely due to a bug in the GNU configure script. The best > TL> way around those bugs is "do not use GNU configure". > > >> FYI, FreeBSD is n

Re: OpenSSL 0.9.6/0.9.7 library version conflicts

2003-02-17 Thread Vivek Khera
> "TL" == Terry Lambert <[EMAIL PROTECTED]> writes: TL> not being overridden, even when the library path is. This is TL> most likely due to a bug in the GNU configure script. The best TL> way around those bugs is "do not use GNU configure". >> FYI, FreeBSD is not the only OS on which this p