Signing other certificates using root CA created by openssl

2002-03-08 Thread Peter Kim
Hi support, Could you please tell me where I made mistake.. Below shows that it fails after I ran the following command to sign other cert: openssl x509 -req -in ca2.csr -CA ca1.crt -CAkey ca1.key -out ca2.crt Currently I am using Win2K with openssl 0.9.6b thank you.

Where is INSTALL file?

2000-09-11 Thread Peter Kim
Hi, I'm a newbie. I am interested in installing mod_ssl. I have downloaded mod_ssl html manual. Here's a clip of Chapter 1: The mod_ssl package consists of the SSL module (part 1 in Figure 1) and a set of source patches for Apache adding the Extended API (EAPI) (part 2 in Figure 1) which

Re: Debugging output?

2000-08-15 Thread Peter Kim
this helps. ------ Peter Kim Software Developer Xcert International Inc. e-mail: [EMAIL PROTECTED] URL: http://www.xcert.com homepage: http://home.xcert.com/~pckim ph 604 640 6210 ext 268 -- Is there a way I can en

Re: client authentication

2000-08-15 Thread Peter Kim
I don't retrieve the certificat request from server successfully. And, of course, the handshaking fails. I'm not sure about this. Could anyone tell me how to fix those problems? Hua I hope this helps. -- Peter Kim

Re: Simple nonblocking client produces SSL_R_UNINITIALIZED

2000-08-03 Thread Peter Kim
be '||'. - Peter Kim Software Developer Xcert International Inc. URL: http://www.xcert.com homepage: http://home.xcert.com/~pckim ph 604 640 6210 ext 268 Explicitly trust my certificate or download the Xcert Internal Repository CA to verify my signature. URL: https

Re: How server can get client certificate?

2000-08-03 Thread Peter Kim
I'm moving this to openssl-users mailing list. Does your server even ask for a client certificate? I mean... did you set the verify mode to SSL_VERIFY_PEER? If you haven't done so, your server is not client-authenticated, which means it won't even ask for a client certificate. The

Re: Certs for OutlookExpress and IE

2000-08-02 Thread Peter Kim
the issuer certificate(s) of the certificate you're using. If I'm wrong on any of this, feel free to correct me. - Peter Kim Software Developer Xcert International Inc. URL: http://www.xcert.com homepage: http://home.xcert.com/~pckim ph 604 640 6210

Fw: Certs for OutlookExpress and IE

2000-08-02 Thread Peter Kim
the newly created certificate: openssl pkcs12 -export -in file.pem -out file.p12 -name "My Certificate" The example was taken directly from pkcs12 man page, so I hope that's right. ----- Peter Kim Software Developer Xcert International Inc.