Re: Wget can't validate some certificates.

2011-08-07 Thread Kamil Jońca
Erwann ABALEA writes: > > 2. > s:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=(c) 2006 VeriSign, > Inc. - For authorized use only/CN=VeriSign Class 3 Public Primary > Certification Authority - G5 > i:/C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification Authority > subject

Re: Wget can't validate some certificates.

2011-08-07 Thread Kamil Jońca
Erwann ABALEA writes: > Hodie VII Id. Aug. MMXI, Kamil Jońca scripsit: >> I have weird problem with some sites using ssl. >> Mozilla _can_ validate certificate but wget can't, and I don't know if >> it is a debian bug or openssl. >> Whole story begins at >> http://lists.debian.org/debian-user/20

Re: [openssl-users] Wget can't validate some certificates.

2011-08-07 Thread Erwann ABALEA
Hodie VII Id. Aug. MMXI, Kamil Jońca scripsit: > I have weird problem with some sites using ssl. > Mozilla _can_ validate certificate but wget can't, and I don't know if > it is a debian bug or openssl. > Whole story begins at > http://lists.debian.org/debian-user/2011/06/msg00089.html The certif

Re: creating an X509 certificate from a text dump - how??

2011-08-07 Thread Dr. Stephen Henson
On Sun, Aug 07, 2011, Luke Kenneth Casson Leighton wrote: > On Sun, Aug 7, 2011 at 8:29 PM, Dr. Stephen Henson wrote: > > On Sun, Aug 07, 2011, Luke Kenneth Casson Leighton wrote: > > > >> > >> * standard openssl functions which set the authority key identifier > >> seem to not allow direct setti

Re: OCSP responder bug?

2011-08-07 Thread Alex Bergmann
Hi Tim, it's quite a while that you've posted this message, but I just ran into the same problem. There is a different behavior between openssl versions like 0.9.8n and 1.0.0c listen on the hosts IP addresses. This is exactly what you have evaluated with your commands. #> openssl ocsp -por

Re: creating an X509 certificate from a text dump - how??

2011-08-07 Thread Luke Kenneth Casson Leighton
On Sun, Aug 7, 2011 at 8:29 PM, Dr. Stephen Henson wrote: > On Sun, Aug 07, 2011, Luke Kenneth Casson Leighton wrote: > >> >> * standard openssl functions which set the authority key identifier >> seem to not allow direct setting of the keyid.  any clues on how to do >> that? >> > > You create an

Re: creating an X509 certificate from a text dump - how??

2011-08-07 Thread Dr. Stephen Henson
On Sun, Aug 07, 2011, Luke Kenneth Casson Leighton wrote: > > * standard openssl functions which set the authority key identifier > seem to not allow direct setting of the keyid. any clues on how to do > that? > You create an AUTHORITY_KEYID structure and populate it. Then you can call X509_ad

Re: creating an X509 certificate from a text dump - how??

2011-08-07 Thread Luke Kenneth Casson Leighton
On Sun, Aug 7, 2011 at 6:47 PM, Dr. Stephen Henson wrote: >> i have access to a text dump of an SSL certificate: it's in the format >> expected of the openssl x509 "-text" dump format.  i do *NOT* have >> access to the quotes original quotes x509 certificate.  therefore, it >> is necessary to rec

Re: creating an X509 certificate from a text dump - how??

2011-08-07 Thread Dr. Stephen Henson
On Sun, Aug 07, 2011, Luke Kenneth Casson Leighton wrote: > folks, hi, > > i have access to a text dump of an SSL certificate: it's in the format > expected of the openssl x509 "-text" dump format. i do *NOT* have > access to the quotes original quotes x509 certificate. therefore, it > is neces

creating an X509 certificate from a text dump - how??

2011-08-07 Thread Luke Kenneth Casson Leighton
folks, hi, i have access to a text dump of an SSL certificate: it's in the format expected of the openssl x509 "-text" dump format. i do *NOT* have access to the quotes original quotes x509 certificate. therefore, it is necessary to recreate it. does anyone have a clue as to how this can be ach

Wget can't validate some certificates.

2011-08-07 Thread Kamil Jońca
I have weird problem with some sites using ssl. Mozilla _can_ validate certificate but wget can't, and I don't know if it is a debian bug or openssl. Whole story begins at http://lists.debian.org/debian-user/2011/06/msg00089.html KJ -- http://sporothrix.wordpress.com/2011/01/16/usa-sie-krztusz