2 certs on one machine

2004-11-05 Thread David Smead
Greetings, I'm running Debian testing. I have a machine with two static IPs, presently on one NIC using a virtual interface. I'd like to make two self-signed certs, one per IP. Is this possible given that the machine only has one hostname? If it matters, the two IPs differ by just the last dig

Re: OpenSSL as part of OpenSA using Windows 2000

2004-11-05 Thread kevin
- Original Message - From: "Thomas J. Hruska" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, November 05, 2004 4:08 PM Subject: Re: OpenSSL as part of OpenSA using Windows 2000 > At 08:33 AM 11/5/2004 +, Mike Hart writeth: > >Hello > > > >I have OpenSA 1.0.4 Installed on

Re: OpenSSL as part of OpenSA using Windows 2000

2004-11-05 Thread Thomas J. Hruska
At 08:33 AM 11/5/2004 +, Mike Hart writeth: >Hello > >I have OpenSA 1.0.4 Installed on a Windows 2000 Server, there is a >Denial of Service vulnerability with the OpenSSL 0.9.6g portion of >this installation that requires OpenSSL to be upgraded to OpenSSL >0.9.7d or 0.9.6m. There seems to be no

Re: Key Encryption

2004-11-05 Thread Charles B Cranston
You are seriously lost. Private keys and public keys (certificates) are USED in performing RSA encryption, but they are not themselves encoded and/or transmitted under RSA encryption. Yes, keys for private-key encryption are sent under public key encryption, but a key for private key encryption i

Re: Key Encryption

2004-11-05 Thread Bernhard Froehlich
[EMAIL PROTECTED] wrote: Bernhard Froehlich wrote: one silly question: if I generate a request with openssl req -new -keyout mykey.pem -out myreq.pem 265 the private key in mykey.pem is encrypted or not? Since my openssl asks me for a password when using "openssl req -new -keyout mykey.pe

Re: Key Encryption

2004-11-05 Thread andrea
Bernhard Froehlich wrote: >> one silly question: if I generate a request with >> openssl req -new -keyout mykey.pem -out myreq.pem 265 >> the private key in mykey.pem is encrypted or not? >> > Since my openssl asks me for a password when using "openssl req -new -keyout > mykey.pem -out myreq.pem"

[no subject]

2004-11-05 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Fri, 05 Nov 2004 15:51:36 +0200, <[EMAIL PROTECTED]> said: andrea> one silly question: if I generate a request with andrea> andrea> openssl req -new -keyout mykey.pem -out myreq.pem 265 andrea> andrea> the private key in mykey.pem is encrypted or not? It's enc

Re: Key Encryption

2004-11-05 Thread Bernhard Froehlich
[EMAIL PROTECTED] wrote: Hi, one silly question: if I generate a request with openssl req -new -keyout mykey.pem -out myreq.pem 265 the private key in mykey.pem is encrypted or not? Since my openssl asks me for a password when using "openssl req -new -keyout mykey.pem -out myreq.pem", I'd think

[no subject]

2004-11-05 Thread andrea
Hi, one silly question: if I generate a request with openssl req -new -keyout mykey.pem -out myreq.pem 265 the private key in mykey.pem is encrypted or not? The questions arises because I have the need of encrypt VNC traffic between a remote and virtually unreachable server and a client using

Re: Problems genning certificates

2004-11-05 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 4 Nov 2004 14:22:35 -0500, "Ronald I. Nutter" <[EMAIL PROTECTED]> said: ronald_nutter> Is anybody getting this or is OpenSSL a dead product ? ronald_nutter> Is there a listserv somewhere that may be able to help ronald_nutter> me ? OpenSSL is a live product

Re: Problems genning certificates

2004-11-05 Thread Frédéric PAILLETTE
Did you try "openssl ca" instead of ca.all ? Directories seem to be invalid because it retrurns "no file found" errors ! Personnaly, I haven't tried the perl script, I use only openssl ca Frederic Ronald I. Nutter wrote: Is anybody getting this or is OpenSSL a dead product ? Is there a listserv so

OpenSSL as part of OpenSA using Windows 2000

2004-11-05 Thread Mike Hart
Hello I have OpenSA 1.0.4 Installed on a Windows 2000 Server, there is a Denial of Service vulnerability with the OpenSSL 0.9.6g portion of this installation that requires OpenSSL to be upgraded to OpenSSL 0.9.7d or 0.9.6m. There seems to be no further upgrades available for OpenSA that include up