Re: Quite a funny and strange behaviour

2014-02-23 Thread Michael Ströder
Walter H. wrote: > subjectKeyIdentifier=hash > > which parts of the certificate are included in generating this hash value? http://tools.ietf.org/html/rfc5280#section-4.2.1.2 Ciao, Michael. smime.p7s Description: S/MIME Cryptographic Signature

Re: Quite a funny and strange behaviour

2014-02-20 Thread Viktor Dukhovni
On Thu, Feb 20, 2014 at 09:11:06PM +0100, Walter H. wrote: > in the extensions config file you have this: > > subjectKeyIdentifier=hash > > which parts of the certificate are included in generating this hash value? It is generally the public key bitstring. -- Viktor. _

Re: Quite a funny and strange behaviour

2014-02-20 Thread Walter H.
On 20.02.2014 17:57, Viktor Dukhovni wrote: On Thu, Feb 20, 2014 at 11:26:20AM +0100, Walter H. wrote: the older CentOS 4.x has in it's ca-bundle.crt a root certificate that expired at the end of last month (on Jan. 28th, 2014), also attached (rootexpired.txt), no other valid root certificate o

Re: Quite a funny and strange behaviour

2014-02-20 Thread Viktor Dukhovni
On Thu, Feb 20, 2014 at 11:26:20AM +0100, Walter H. wrote: > the older CentOS 4.x has in it's ca-bundle.crt a root certificate that > expired at the end of last month (on Jan. 28th, 2014), also attached > (rootexpired.txt), no other valid root certificate of this CA (GlobalSign) > can be found in

Quite a funny and strange behaviour

2014-02-20 Thread Walter H.
Hello, it is already solved, but I just want to tell others; I have two VMs, one with an older CentOS 4.x and one with a new CentOS 6.5 both run Postfix as MTA; both have configured a smarthost; the smarthost allows STARTTLS and has a certificate, that is issued by AlphaSSL; the Authority Infor