Re: help with x.509 extrensions

2008-07-15 Thread Dr. Stephen Henson
On Mon, Jul 14, 2008, Oil Supply wrote: Thanks Dr. Henson, So that leaves me with some more questions. What is the new_oids section supposed to be used for? Because it looks like I just add a name=oid and then for simple strings, add the extension as name=whatever the man pages refer to

Help on creating root certificate.

2008-07-15 Thread rameshj
Hi, I am new to Open SSL. I need to configure my application server with client authentication(user based certificate authentication). To achieve this, I have configured my tomcat server.xml with clientAuth=true. Currently I have created a client certificate and added it into both in my

Need help on openssl-0.9.8g compilation error

2008-07-15 Thread Haresh_Eswari
Hi, I am new to openssl. I am trying to cross compiling openssl-0.9.8g for mipsel-linux. I added the following lines to my Configure file linux-mipsel, mipsel-linux-gcc:-DL_ENDIAN -DTERMIO -Os -fomit-frame-pointer -Wall::-D_REENTRANT:-ldl:BN_LLONG::dlfcn:linux-shared:-fPIC:.so.

Re: help with x.509 extrensions

2008-07-15 Thread Oil Supply
What is the new_oids section supposed to be used for? Because it looks like I just add a name=oid and then for simple strings, add the extension as name=whatever the man pages refer to this as well. That is my confusion. That should work but it wont result in name being displayed on things

Re: help with x.509 extrensions

2008-07-15 Thread Patrick Patterson
On July 15, 2008 10:38:45 am Oil Supply wrote: What is the new_oids section supposed to be used for? Because it looks like I just add a name=oid and then for simple strings, add the extension as name=whatever the man pages refer to this as well. That is my confusion. That should work

Re: help with x.509 extrensions

2008-07-15 Thread Oil Supply
If you are including a value in there that is meant to be read by a person, then yes. If you are including a value in there that is meant to be interpretted and acted upon by a Relying Party computer program, then no - but then, as I said in my previous message, if you include a private

Re: help with x.509 extrensions

2008-07-15 Thread Patrick Patterson
On July 15, 2008 10:57:21 am you wrote: If you are including a value in there that is meant to be read by a person, then yes. If you are including a value in there that is meant to be interpretted and acted upon by a Relying Party computer program, then no - but then, as I said in my

AUTO: Jesse Santana/AdminFinance/CSULB is out of the office. (returning 07/21/2008)

2008-07-15 Thread Jesse Santana
I am out of the office until 07/21/2008. I will respond to your message when I return. If you require immediate assistance, please contact the Campus Help Desk at [EMAIL PROTECTED] Note: This is an automated response to your message Re: help with x.509 extrensions sent on 7/15/2008 3:21:55

Re: help with x.509 extrensions

2008-07-15 Thread Kyle Hamilton
On Tue, Jul 15, 2008 at 7:57 AM, Oil Supply [EMAIL PROTECTED] wrote: If you are including a value in there that is meant to be read by a person, then yes. If you are including a value in there that is meant to be interpretted and acted upon by a Relying Party computer program, then no - but

Re: help with x.509 extrensions (OFFTOPIC)

2008-07-15 Thread Patrick Patterson
Hi Kyle; On July 15, 2008 02:22:59 pm Kyle Hamilton wrote: I should mention that Lotus Domino has been doing this for nearly 20 years. If it had a lower cost-of-entry (currently it's around $35,000 for a single server, plus licenses to run Notes clients, plus client licenses for Notes

Re: Help on creating root certificate.

2008-07-15 Thread Kyle Hamilton
In your OpenSSL distribution, you should have gotten a script called either CA.pl or CA.sh. They automate the steps necessary to create a CA and to sign certificates with that CA. (It should be noted that it is NOT intended to do everything an actual CA needs to do, it is quite possibly the most

Re: Signature validation in certificates

2008-07-15 Thread Patrick Patterson
Hi Geetha: Certificate Validation is explained in detail in RFC3280 (and, more up to date, RFC5280). More replies inline: On July 9, 2008 03:17:56 am Geetha_Priya wrote: A root certificate [signed by CA] comprises of version, serial num, issuer and subject details, public key algorithm

How to start?

2008-07-15 Thread William Estrada
Hi group, I am starting a project that will require using SSL to transmit data in an encrypted mode. I would like to find some simple code that I could use as a model for my program. The program will be a peer to peer communication using the same code at each end, an SSL Agent. I want to use

Re: How to start?

2008-07-15 Thread Bobby Krupczak
Hi! I am starting a project that will require using SSL to transmit data in an encrypted mode. I would like to find some simple code that I could use as a model for my program. The program will be a peer to peer communication using the same code at each end, an SSL Agent. I want to use

Re: help with x.509 extrensions

2008-07-15 Thread Oil Supply
Thanks Kyle. I am going to look at this and Patrick's suggestions for SAML and WS-Fed. They seem to be viable options. On Tue, Jul 15, 2008 at 2:22 PM, Kyle Hamilton [EMAIL PROTECTED] wrote: On Tue, Jul 15, 2008 at 7:57 AM, Oil Supply [EMAIL PROTECTED] wrote: If you are including a value in