Problem: SSL-Certs for MS-Servers, if intermediate CA?

-Michael Werzowa A-1190 Wien, Paradisgasse 28/4/6 +43 (664)302 4511, fax +43 (1)328 1992 14 [EMAIL PROTECTED], [EMAIL PROTECTED] __ OpenSSL Project

Re: Multiple CRL Distribution Points ?

and BASE64 formats. -- Karl-Michael Werzowa A-1190 Wien, Paradisgasse 28/4/6 +43 (664)302 4511, fax +43 (1)328 1992 14 [EMAIL PROTECTED], [EMAIL PROTECTED

Re: Combine certificates into chain

[EMAIL PROTECTED] -- Karl-Michael Werzowa A-1190 Wien, Paradisgasse 28/4/6 +43 (664)302 4511, fax +43 (1)328 1992 14 [EMAIL PROTECTED], [EMAIL PROTECTED

Re: OT: how to make OpenSSL certs for M$ IAS EAP-TLS?

. -- Karl-Michael Werzowa A-1190 Wien, Paradisgasse 28/4/6 +43 (664)302 4511, fax +43 (1)328 1992 14 [EMAIL PROTECTED], [EMAIL PROTECTED

Re: [ANNOUNCE] OpenSSL 0.9.7 beta 4 released

Unix solution? intersting! Best regards, Michael -- Karl-Michael Werzowa A-1190 Wien, Paradisgasse 28/4/6 +43 (664)302 4511, fax +43 (1)328 1992 14 [EMAIL PROTECTED], [EMAIL PROTECTED

Re: I give up

://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] -- Karl-Michael Werzowa A-1190 Wien, Paradisgasse 28/4/6 +43 (664)302 4511, fax

Re: OT: how to make OpenSSL certs for M$ IAS EAP-TLS?

not be an option anywhere else in the company except where I am :-) Thanks! -- Karl-Michael Werzowa A-1190 Wien, Paradisgasse 28/4/6 +43 (664)302 4511, fax +43 (1)328 1992 14 [EMAIL PROTECTED], [EMAIL PROTECTED

Re: How can I add 8-bit charset/unicode strings to certs?

) system doing some ISO charset, but Openssl expecting unicode? If so, what is the correct way to do this? Thanks in advance for any help - my poor ASCII brain is feeling overwhelmed :-) -- Karl-Michael Werzowa A-1190 Wien

Re: PKCS#10?

] -- Karl-Michael Werzowa A-1190 Wien, Paradisgasse 28/4/6 +43 (664)302 4511, fax +43 (1)328 1992 14 [EMAIL PROTECTED], [EMAIL PROTECTED] __ OpenSSL

Re: PKCS#10?

[EMAIL PROTECTED] -- Karl-Michael Werzowa A-1190 Wien, Paradisgasse 28/4/6 +43 (664)302 4511, fax +43 (1)328 1992 14 [EMAIL PROTECTED], [EMAIL PROTECTED

Re: Can we use / and = in CN and DN ?

. -- Karl-Michael Werzowa A-1190 Wien, Paradisgasse 28/4/6 +43 (664)302 4511, fax +43 (1)328 1992 14 [EMAIL PROTECTED], [EMAIL PROTECTED]

Re: Can we use / and = in CN and DN ?

] -- Karl-Michael Werzowa A-1190 Wien, Paradisgasse 28/4/6 +43 (664)302 4511, fax +43 (1)328 1992 14 [EMAIL PROTECTED], [EMAIL PROTECTED

Re: Cert using opnssl:Kdb format to PEM Format

://webhosting.yahoo.com/ - Let the expert host your web site -- Karl-Michael Werzowa A-1190 Wien, Paradisgasse 28/4/6 +43 (664)302 4511, fax +43 (1)328 1992 14 [EMAIL PROTECTED], [EMAIL PROTECTED]

Re: Converting PEM file to PKCS12 or PFX for the MacOS (Not MacOSx)...

. -- Karl-Michael Werzowa A-1190 Wien, Paradisgasse 28/4/6 +43 (664)302 4511, fax +43 (1)328 1992 14 [EMAIL PROTECTED], [EMAIL PROTECTED]

Re: Converting PEM file to PKCS12 or PFX for the MacOS (Not MacOSx)...

winzer jr. -- Karl-Michael Werzowa A-1190 Wien, Paradisgasse 28/4/6 +43 (664)302 4511, fax +43 (1)328 1992 14 [EMAIL PROTECTED], [EMAIL PROTECTED]

Re: free Certificate Authority

. -- Karl-Michael Werzowa A-1190 Wien, Paradisgasse 28/4/6 +43 (664)302 4511, fax +43 (1)328 1992 14 [EMAIL PROTECTED

Re: oids, attributes (doc pointers)

] -- Karl-Michael Werzowa A-1190 Wien, Paradisgasse 28/4/6 +43 (664)302 4511, fax +43 (1)328 1992 14 [EMAIL PROTECTED

Re: addding own extensions to openssl.cnf

available for standard-extensions. Best regards, Michael Am 2002-10-18 20:27 Uhr schrieb Dr. Stephen Henson unter [EMAIL PROTECTED]: On Fri, Oct 18, 2002, Karl-Michael Werzowa wrote: Hello, helpful experts, How do I add a custom extension to openssl? Just adding the extension to openssl.cnf

addding own extensions to openssl.cnf

Hello, helpful experts, How do I add a custom extension to openssl? Just adding the extension to openssl.cnf (into the right section) does not work: mycustomextension=DER:01:01:FF (Would be nice to input the asn.1 + OID in some oid-file ;-) Thanks in advance, Michael --

Re: Specifying CRL URL for CA

hello, Fred easiest would be to insert the extension crlDistributionPoints=URI:http://your.server.com/your.crl in the section [usr_cert] of your working openssl.cnf. If you need ldap-URIs, create a subsection for the URIs. Best regards, Michael Am 2002-08-23 20:31 Uhr schrieb Reimer, Fred

RE: How do I input ldap urls of the crlDistributionPoints URI value in openssl.cnf ?

Hello, You have to use / instead of the , inside the LDAP-URI, because the , delimits the URIs. The ? does not do any harm, you can use it without change. (Besides, some time ago I read in a comment that openssl would not support ldap-URIs because of the commas inside the ldap-URI. When you

crlDistributionPoint -- unknown extension name

Hello, We are using openssl since more than a year for an internal pki solution. Now we wanted to add the crlDistributionPoint - ext. to the certificates. When adding a line with crlDistributionPoint= URI:... to the openssl.cnf into the c3_ca stanza (... for ca-certs of sub-CAs), there is an

Re: Root.cacert

PROTECTED] Automated List Manager [EMAIL PROTECTED] -- Karl-Michael Werzowa A-1190 Wien, Paradisgasse 28/4/6 +43 (664)302 4511, fax +43 (1)328 1992 14 [EMAIL PROTECTED], [EMAIL PROTECTED