Re: How to create a non exportable private key certificate using openssl

2009-07-15 Thread naveen.bn
Hi, Can you not generate a certificate with the common name as the MAC address of the PC. Thanks and regards Naveen tito wrote: Thanks a lot for the reply David. First I will explain my threat model. I have got lot of employees who do some transactions around the world sitting in their branc

Re: key

2009-05-19 Thread naveen.bn
far a TLS is concerned. Michael S. Zick wrote: On Tue May 19 2009, naveen.bn wrote: Hi ALL, I have a question ? can we have one public key and two private keys. It is not a built-in feature. Which I think is your question. Note that *in general* the terms "public key" and &quo

Re: [openssl-users] public key

2009-05-19 Thread naveen.bn
What is the contents on which CA would have signed from his private key. I want to know it because if an attacker replaces his public key in the server certificate which i get than its game over for me . Victor B. Wagner wrote: On 2009.05.19 at 15:24:43 +0530, naveen.bn wrote: Thank

Re: [openssl-users] public key

2009-05-19 Thread naveen.bn
Thank you . Can i include the public key generated below to a certificate and if possible how can it be done. openssl rsa -pubout -in priv.pem -out pub.pem Erwann ABALEA wrote: Bonjour, Hodie XIV Kal. Iun. MMIX, naveen.bn scripsit: I have used this command to obtain public key in hex

public key

2009-05-19 Thread naveen.bn
Hi I have used this command to obtain public key in hex but, how to get the individual value of public key ( n,e). openssl x509 -modulus -noout -inform PEM < /home/certificates/MTA/MTA_DEVICE.cert.pem | sed s/Modulus=/0x/ 0xC147647398B19BBC59CD2CEC49B8774E0025AC9161955CE5F9C6E2DCA8D026D04565F4

Re: [openssl-users] key

2009-05-19 Thread naveen.bn
. Please correct me if I am wrong . Thanks and regards Naveen Erwann ABALEA wrote: Hi, Hodie XIV Kal. Iun. MMIX, naveen.bn scripsit: I have a question ? can we have one public key and two private keys. You can (set d' to d+k.n with an integer k), but all the private keys wi

key

2009-05-18 Thread naveen.bn
Hi ALL, I have a question ? can we have one public key and two private keys. Thanks and regards naveen __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenss

Re: Client side certificate for using in SSL connection

2009-02-06 Thread naveen.bn
mb0 wrote: Hello, i explored this article: http://support.microsoft.com/kb/315588 My questions are about using openssl to generate client-side certificate for using in SSL tunnel 1. can it be self-signed root certificate? 2. what options of openssl must i use so that Internet Explorer coul

Re: help

2008-11-25 Thread naveen.bn
to due to bad MAC. the server sends this alert to client and handshake fails. Could you pls advise how to debug it further. Best regards Sushil On 11/14/08, naveen.bn <[EMAIL PROTECTED]> wrote: Hi All, I am a new to SSL. I have installed openssl and using the SSL APIs , I have written a

Re: help

2008-11-17 Thread naveen.bn
n Mon, Nov 17, 2008 at 4:34 PM, naveen.bn <http://naveen.bn> http://naveen.bn>@globaledgesoft.com <http://globaledgesoft.com>> wrote: vinni rathore wrote: What is ur failure error messages can u please send them... On Fri, Nov 14, 2008 at 10:21 PM, Michael Simm

Re: help

2008-11-16 Thread naveen.bn
vinni rathore wrote: What is ur failure error messages can u please send them... On Fri, Nov 14, 2008 at 10:21 PM, Michael Simms <[EMAIL PROTECTED] > wrote: > I am a new to SSL. I have installed openssl and using the SSL APIs , I have > written a small c

Re: help

2008-11-16 Thread naveen.bn
vinni rathore wrote: What is ur failure error messages can u please send them... On Fri, Nov 14, 2008 at 10:21 PM, Michael Simms <[EMAIL PROTECTED] > wrote: > I am a new to SSL. I have installed openssl and using the SSL APIs , I have > written a small c

help

2008-11-14 Thread naveen.bn
Hi All, I am a new to SSL. I have installed openssl and using the SSL APIs , I have written a small client - server program in C, but SSL_connect fails from client end and SSL_accept fails from server. I have generated the root CA certificate, which I have used to sign both the client and ser

help to generate valid certificates

2008-06-04 Thread naveen.bn
Hi all, I have a problem in retaining the X509 extension in the end certificate which will be submitted to kdc. i generate the certificate using the openssl tool this what it looks like . openssl req -new -newkey rsa:1024 -nodes -config openssl.cnf -out ca.csr -keyout ca.key optput is the c