Why doees an SSL client cert have a private/public key embedded?

2012-10-21 Thread Tom Browder
I have successfully generated SSL client certificates for my Apache web site users, and we have successfully tested them using it to access my restricted areas on my web site. One thing I'm not sure of is why there is a private/public key pair in the client certs. Hopefully it's not the same

Re: Why doees an SSL client cert have a private/public key embedded?

2012-10-21 Thread Martin v. Löwis
Am 21.10.12 19:25, schrieb Tom Browder: I have successfully generated SSL client certificates for my Apache web site users, and we have successfully tested them using it to access my restricted areas on my web site. One thing I'm not sure of is why there is a private/public key pair in the

Re: Why doees an SSL client cert have a private/public key embedded?

2012-10-21 Thread Tom Browder
On Sun, Oct 21, 2012 at 2:34 PM, Martin v. Löwis mar...@v.loewis.de wrote: Am 21.10.12 19:25, schrieb Tom Browder: I have successfully generated SSL client certificates for my Apache web site users, and we have successfully tested them using it to access my restricted areas on my web site.

Re:RE: problem with cross compile OpenSSL

2012-10-21 Thread 周小毛
Dave,thanks very much for you reply. The problem is still existing. From:owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of ??? Sent: Friday, 19 October, 2012 02:44 To:openssl-users@openssl.org Subject: problem with cross compile OpenSSL Hi, I am glad to

Re: X509 V1 intermediate CA vs end-entity

2012-10-21 Thread Kyle Hamilton
You can find out if the V1 cert verifies directly with any of the certificates in the trust store or its own public key. There's pretty much nothing else you can do with it, other than try to link it to a Distinguished Name that may or may not be useful. Also, (EXFLAG_V1|EXFLAG_SS) doesn't tell

Re: Bug report

2012-10-21 Thread lists
Version of OpenSSL being effected OpenSSL 1.0.1c Version of the operating system being used Windows XP Seems there is a limitation to the size of text that can be encrypted through Openssl command prompt via Echo ex: echo 'test string 1' | openssl enc -aes-256-cbc -a -salt -pass

Re: win32 exe linked with -lssl -lcrypt

2012-10-21 Thread lists
On 10/14/2012 11:53 PM, ml wrote: hello sir and doctor i am a little question concerning the presence of libssl.dll libcrypt.dll into the win32 standard system or OS into linux this lib are very standard its the same when are the poor win32 OS is ready If it is a question, the answer is no.

RE: Why doees an SSL client cert have a private/public key embedded?

2012-10-21 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Martin v. Löwis Sent: Sunday, 21 October, 2012 15:35 Am 21.10.12 19:25, schrieb Tom Browder: I have successfully generated SSL client certificates for my Apache web site users, snip One thing I'm not sure of is why there is a