RE: Converting own CA certificate to pkcs12

2002-11-22 Thread Joern Sierwald
At 13:02 22.11.2002 +0100, you wrote: As far as I know there are only two ways for importing a CA certificate into Netscape browser: 1) Through an HTTP/HTTPs connection to a Web server hosting the CA certificate (using MIME type application/x-x509-ca-cert) 2) Importing it

Re: How can I add 8-bit charset/unicode strings to certs?

2002-11-13 Thread Joern Sierwald
At 11:42 14.11.2002 +1300, you wrote: On Wed, Nov 13, 2002 at 09:35:47AM +0100, Karl-Michael Werzowa wrote: letters, etc. (If you use an Ö or Ä it may be easy, but what about hungarian, slovak, croatian characters? How to type these? Do you know the possible transcripts?) The best way seems

Re: How can I add 8-bit charset/unicode strings to certs?

2002-11-12 Thread Joern Sierwald
At 16:51 12.11.2002 +1300, you wrote: Hi there I want to generate certs from our internal LDAP server. We have people from all over the world here, and so some of these entries have 8bit chars in their names (shock! horror!) Now I went off and generated a cert for one Frank Österberg (that's an

Re: How can I add 8-bit charset/unicode strings to certs?

2002-11-12 Thread Joern Sierwald
At 16:51 12.11.2002 +1300, you wrote: Now I went off and generated a cert for one Frank Österberg (that's an O with two dots on top), and when I vi the PEM afterwards I see \xD6sterberg. Run your PEM through openssl asn1parse -dump -in myfile.pem That will display the encoding. Post the

Re: dummy question about PKCS#12

2002-10-11 Thread Joern Sierwald
At 18:32 11.10.2002 +0200, you wrote: hi! this is probably basic question. i'd like to know if there is any way to obtain the public certificates inside a PKCS#12 without the need of decrypt it. if the certificates are public it should be obvious to be able to read them. is it

Re: supported string for certificate request ...

2002-07-19 Thread Joern Sierwald
At 18:02 19.07.2002 +0900, [EMAIL PROTECTED] wrote: $)C Hello list, I'm quite new to openssl but here is a question I can't solve for myself. req_distinguished_name part of my configuration file is C = KR ST = seoul L = seoul O = telecom OU = telecom CN = H+1f5? # It's an Korean word

Re: 1032 bits Modulus

2002-05-10 Thread Joern Sierwald
At 10:09 10.05.2002 -0300, you wrote: Hi all, I have a simple question: why the modulus is showed with 1032 bits and it always has a 0 at the beginning? It does this way in OpenSSL but also on browsers. Thank you for your help. Heber. modulus: 00:e6:fa:c3:06:49:ac:95:c2:9e:bb:f6:04:dd:60:

Re: Creating password-protected certs.

2002-04-30 Thread Joern Sierwald
At 10:52 30.04.2002 +0200, you wrote: In message [EMAIL PROTECTED] on Mon, 29 Apr 2002 12:22:32 -0700 (PDT), Tim Jones [EMAIL PROTECTED] said: t0psecret I'm trying to create password-protected client certs t0psecret with OpenSSL and ssl.ca-0.1.tar.gz. Is this what t0psecret export password

Re: J/Crypto 3.3 DER encoded certificate cannot be read by openssl-0.9.6b

2002-04-15 Thread Joern Sierwald
At 16:34 15.04.2002 +0200, you wrote: Hello, there! :) I've checked google in this but to no avail - so I'm asking here... Hope its not a duplicate thread. Trying to read the attached DER form of a X509 certificate with OpenSSL 0.9.6c and 0.9.6b yields the following error: paveltz@MORDOR ~ $

Re: How to add Postal code to a certificate request

2002-04-04 Thread Joern Sierwald
At 14:25 04.04.2002 +0530, you wrote: Hi, I was able to add the postal code. But there is some problem with the Short Name. What should be given for the short name? I have given ZIP and also tried with PC. With the above values in the request, generation of certificate request is fine. But

Re: Compatibility with Crypt::DES

2002-04-04 Thread Joern Sierwald
At 11:46 04.04.2002 -0500, you wrote: Hi, I'm trying to use the openssl libraries to decrypt text encrypted using perl's Crypt::DES module without success. After failing using CBC, I've switched to a simple 8 byte block encrypted with des_ecb_encrypt and this still produces different cipher

Re: How to add Postal code to a certificate request

2002-04-02 Thread Joern Sierwald
At 15:25 02.04.2002 +0530, you wrote: Hi, I have a doubt regarding the addition of postal code or PIN code or ZIP code to the certificate request. How to add Postal code to a certificate request. I tried to search for an NID for the postal code but could'nt found. What is the way to add the

Re: Viewing the content of an X509 cert with V3 extensions

2002-03-25 Thread Joern Sierwald
At 10:10 25.03.2002 -0500, you wrote: I've created a cert that contains X509 extensions (I stored data in the subject-alt name field). I'm looking for a utility that can dump the cert (in ASCII) so that I can make sure all the expected values are there. Does such a utility exist (that will also

Re: secure mailinglists

2002-03-07 Thread Joern Sierwald
At 21:41 07.03.2002 +0100, you wrote: Hi everybody, we have set up our own CA and generated for everybody user certificates for secure communication. It really works fine. The task: now we want to set up mailinglists (server side) like [EMAIL PROTECTED] where some users of our company and some

Re: binding IP addresses to X.509 certificates for use with OpenSSL?

2001-11-29 Thread Joern Sierwald
At 09:52 29.11.2001 +, you wrote: Hi Guys, I have come accross an issue here, where some fellow designers want to generate an x.509 certificate for use with OpenSSL, but they want to specifically bind the generated cert to only be used with one individual IP address. Is this possible? I