Re: SSL cert & key generation on an appliance

2003-10-14 Thread Mike Klein
What you found is for self-signed certificates...not sure if this is what you want. Kind of too simplistic. What most faqs should steer useres towards is not self-signed server certs, but a self-signed ca...from which all else derives. In my server setup for my home office/lab...I have a self-s

Re: SSL cert & key generation on an appliance

2003-10-14 Thread Rob Patrick
Found a solution in the list archives from last month. http://www.moser-willi.at/doc/howto/docs/AutoSSL/ That script works great!!! Thanks much. - Original Message - From: "Waitman C. Gobble, II" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, October 15, 2003 12:28 AM Su

RE: SSL cert & key generation on an appliance

2003-10-14 Thread Waitman C. Gobble, II
Hello, I am positive that there is a perl module, there just has to be. I haven't used it though. If you aren't exactly stuck on perl, you might have a look at the openssl functions in php: http://us3.php.net/manual/en/ref.openssl.php Take care, Waitman Gobble EMK Design Telephone (714) 522-

SSL cert & key generation on an appliance

2003-10-14 Thread Rob Patrick
Hello,   We're looking to deploy Linux-based security appliances that only provide the end-user with a web front-end.   We want the end-user to have the ability to generate new (self-signed) certificates and SSL keys to be used on the appliance under Apache mod_ssl once installed.     I'm bet

Re: Win32: Windows Installer MSI package creation code

2003-10-14 Thread Thomas J. Hruska
At 09:35 PM 10/14/2003 +0200, Peter 'Luna' Runestig writeth: >[reposting this, that I posted on Friday. seems to have been lost, maybe >because I happened to post from a non-subscribed address (although that >should be fine according to majordomo and the web site).] > >Hi all, > >I posted a message

"openssl ca" function (SPKAC vs. PKCS10req)

2003-10-14 Thread John Douglass
I have noticed that when signing SPKAC vs. a PKCS10 request, the resulting -out is in a different format. For example: "openssl ca -in request.spkac -spkac -out cert1.file" results in a DER file where "openssl ca -in request.pkcs10 -out cert2.file" results in a PKCS10 PEM file Ideally, depen

Win32: Windows Installer MSI package creation code

2003-10-14 Thread Peter 'Luna' Runestig
[reposting this, that I posted on Friday. seems to have been lost, maybe because I happened to post from a non-subscribed address (although that should be fine according to majordomo and the web site).] Hi all, I posted a message (or three actually) about this to openssl-dev little more than a ye

Re: Entropy gathering on Mac OS 9?

2003-10-14 Thread Joshua Juran
--On Tuesday, October 14, 2003 11:02 AM -0400 [EMAIL PROTECTED] wrote: I'm not a Mac programmer, but I'm playing proxy for them. We will need to support Mac down to OS9 and I'd like an idea how they will seed the PRNG. For instance, on Windows there's at least a last resort of RAND_screen(). On

Re: 0.9.7c versus 0.9.6k?

2003-10-14 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 14 Oct 2003 12:46:37 -0400, [EMAIL PROTECTED] said: KOverton> Is there any such thing as a consensus on which branch is KOverton> preferred? Is there anything hugely new in the 0.9.7 branch KOverton> that I may want to avoid for a widely distributed KOverto

0.9.7c versus 0.9.6k?

2003-10-14 Thread KOverton
Is there any such thing as a consensus on which branch is preferred?  Is there anything hugely new in the 0.9.7 branch that I may want to avoid for a widely distributed application? TIA, -- kov

Re: PKCS11 CHIL

2003-10-14 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 14 Oct 2003 08:17:44 -0700 (PDT), Kabher Khan <[EMAIL PROTECTED]> said: kabherkhan> I am Kabheer.I just started woorking with OpenSSL few kabherkhan> days back.i intaleed "openssl-engine-0.9.6k" and kabherkhan> builded the samples in VC++ environment.W

Re: Entropy gathering on Mac OS 9?

2003-10-14 Thread Tim Dierks
At 11:02 AM 10/14/2003, [EMAIL PROTECTED] wrote: I'm not a Mac programmer, but I'm playing proxy for them. We will need to support Mac down to OS9 and I'd like an idea how they will seed the PRNG. For instance, on Windows there's at least a last resort of RAND_screen(). On the MacOS 10 syste

PKCS11 CHIL

2003-10-14 Thread Kabher Khan
Hi All   I am Kabheer.I just started woorking with OpenSSL few days back.i intaleed "openssl-engine-0.9.6k" and  builded the samples in VC++ environment.When i am trying to generate keys on my nCipher HSM by running the command * OpenSSL> genrsa

Entropy gathering on Mac OS 9?

2003-10-14 Thread KOverton
I'm not a Mac programmer, but I'm playing proxy for them.  We will need to support Mac down to OS9 and I'd like an idea how they will seed the PRNG.  For instance, on Windows there's at least a last resort of RAND_screen().  On the MacOS 10 systems they probably have some sort of /dev/random avail