Re: Signing a server cert... And getting it to work...

2002-03-12 Thread Huibert Kivits
Hi Brandon, Have you imported the public root certificate into your browser before trying to connect to the webserver? Otherwise, your browser won't recognize the certificate. Best regards, Huibert Quoting Brandon Amundson <[EMAIL PROTECTED]>: > Hello again. > > I am having the worst time

Re: Creating a SSL Certificate

2002-03-09 Thread Huibert Kivits
Hi Eugenio, Creating SSL certificates is the raison d'etre of OpenSSL. So yes, that's possible. About domain names: you are confusing the domain name (like "example.com") with the common name (like "www.example.com"). The common name is the same as the name of your webserver. If you create a

Re: Creating Accepted Public CA Certs

2002-02-28 Thread Huibert Kivits
Hi Damian, This won't be possible. The Verisign certificate in your MS browser is a public root certificate, and you would need the corresponding private key to sign any certificates. Do not expect Verisign to hand over this private key to you! What you could do is to place your own public roo

Re: Problem openssl.cnf - determining certificate's purposes

2002-02-27 Thread Huibert Kivits
r extension sections: extendedKeyUsage=serverAuth,msSGC,codeSigning or something like that. Pity this line and comments are missing in the default openssl.cnf file that comes with Mandrake (and many other distros, I guess). Best regards, Huibert Quoting Dr S N Henson <[EMAIL PROTECTED]>

Re: Problem openssl.cnf - determining certificate's purposes

2002-02-22 Thread Huibert Kivits
Kind regards, Huibert Kivits Quoting Dr S N Henson <[EMAIL PROTECTED]>: > Huibert Kivits wrote: > > > > Hi Everybody, > > > > I am new to this list, so maybe this question has been asked before. > > However, I could not find anything about this in the archive

Re: smime segfault on redhat 7.2

2002-02-22 Thread Huibert Kivits
Hi Alex, I have no experience with compiling snaps. But I did try to sign mail with someone's smime certificate. This failed because the guy had sent me a self-signed certificate. Apparently, OpenSSL only accepts smime certificates that have been issued by Certification Authorities like Verisi