Re: Add pkcs11 command

2019-03-08 Thread Antonio Iacono
OK thanks, initial implementation of STORE into my pkcs11 engine (1) is ready. I am able to do this openssl storeutl -engine pkcs11 'pkcs11:objecttype=cert;object=test' and this is result: engine "pkcs11" set. 0: Certificate -BEGIN CERTIFICATE- MIIC/DCCAeSgAwIBAgIUDrAyYf/dMsavGGEuYMLqJxFrH

Re: OpenVPNGui 2.4.7 fails: format error in certificate's notAfter field

2019-03-08 Thread Jan Just Keijser
Hi Erwann, On 07/03/19 11:35, Erwann Abalea via openssl-users wrote: Bonjour, Here, reject the certificate is the correct behaviour, IMO. UTCTime/GeneralizedTime are defined in X.680. UTCTime: - can have no timezone information, or have Z, of have a timezone offset (with hours and minutes)