Re: Does a root CA need two certificates?

2005-01-19 Thread Shaun Lipscombe
* R. Markham wrote: > I don't understand why is a root CA which everybody can download from the > internet is more secure than if I use my own CA. I want to make it clear I > am not against using Certificates from an official CA. But in some cases you > can save your money as a expenses for the ce

Re: SSL (or alike) over UDP

2005-01-17 Thread Shaun Lipscombe
* Ben Laurie wrote: > Peter 'Luna' Runestig wrote: > >On Fri, 14 Jan 2005 21:10 pm, Eduardo PĂ©rez wrote: > > > >>Do you know if it's possible to use SSL (or some other protocol) over > >>UDP running totally in user space. > > > > > >The OpenVPN project runs OpenSSL over UDP,

Re: Using OpenSSL on unix to manage certs for Windows boxes (CSR's and PKCS12)

2005-01-14 Thread Shaun Lipscombe
* Bernhard Froehlich wrote: > Shaun Lipscombe wrote: > > ><>[...] > >One last question... it's to do with client certificates. If I have two > >websites, say, and they both require client certificates signed by the > >CA "ABC. Ltd" there is noth

Re: Using OpenSSL on unix to manage certs for Windows boxes (CSR's and PKCS12)

2005-01-13 Thread Shaun Lipscombe
* Dr. Stephen Henson wrote: > On Thu, Jan 13, 2005, Shaun Lipscombe wrote: > > > Why is it that a Microsoft box requires SSL certificates be imported > > from a PCKS12 file when all other operating systems and software are OK > > with a PEM certificate? > > It does

Using OpenSSL on unix to manage certs for Windows boxes (CSR's and PKCS12)

2005-01-13 Thread Shaun Lipscombe
I have used openssl to setup a CA to sign site certificates and client certificates. All is working just great , however I have a couple of questions to ask so that I dont go insane. Why is it that a Microsoft box requires SSL certificates be imported from a PCKS12 file when all other operating s