Re: Re: Apache 2 with ECC certificates

2008-04-09 Thread Big BDI
Reply-to: openssl-users@openssl.org X-Sender: Victor Duchovni [EMAIL PROTECTED] X-List-Manager: OpenSSL Majordomo [version 1.94.5] X-List-Name: openssl-users Content-Length: 4899 On Tue, Apr 08, 2008 at 08:43:51PM -0400, Big BDI wrote: Is something wrong with my certificates(Pasted

Re: Re: Apache 2 with ECC certificates

2008-04-09 Thread Victor Duchovni
On Wed, Apr 09, 2008 at 10:31:36AM -0400, Big BDI wrote: Thank you for your suggestion, I was successful in getting Firefox to connect with the addition of v3 extensions. Cool! Which releases of Firefox support ECC? [ v3_server ] subjectKeyIdentifier=hash

Re: Apache 2 with ECC certificates

2008-04-09 Thread Elia, Leonard F.
If you type about:config into the address bar in Firefox (I am using 2.0.0.13) and type ecdsa into the filter field, Firefox will display the ECC ciphers. Victor Duchovni wrote: Cool! Which releases of Firefox support ECC? -- Leonard F. Elia III, CISSP 757.864.5009 Sr. System

Re: Re: Re: Apache 2 with ECC certificates

2008-04-09 Thread Big BDI
Cool! Which releases of Firefox support ECC? I am certain Firefox (Windows XP Pro) 2.0.0.12 and .13(latest) support ECC certificates. In linux (debian etch 4.0), I was also using the same versions. According to http://dev.experimentalstuff.com:8082/mozilla/;, ECC has been enabled in firefox

Apache 2 with ECC certificates

2008-04-08 Thread Big BDI
I patched the Apache 2.2.2 source and followed the instructions(https://issues.apache.org/bugzilla/attachment.cgi?id=18657action=edit ), and installed many versions of openssl, including the stable 0.9.8g version, and I also tried current snapshots as of april 2008. I managed to get Apache 2 up

Re: Apache 2 with ECC certificates

2008-04-08 Thread Victor Duchovni
On Tue, Apr 08, 2008 at 08:43:51PM -0400, Big BDI wrote: Is something wrong with my certificates(Pasted below)? I generated them with ECCcertgen.sh bundled with openssl... Apache does not generate any errors. One of my test keypairs is pasted below (I used a secp521r1 curve, but I didn't