Re: One CA for many clients (a silly question)

2009-07-19 Thread javierm
A, but MyOrg-Plants sub CA and MyOrg-Cars is also a CA derived from MyOrg and it simplifies the procedures I mention above at SSLRequire directive, because the filter is based on Sub-CA and not on EVERY client. -- View this message in context: http://www.nabble.com/One-CA-for-many-clients-%28a-silly-q

Re: One CA for many clients (a silly question)

2009-07-19 Thread javierm
-- View this message in context: http://www.nabble.com/One-CA-for-many-clients-%28a-silly-question%29-tp24510806p24559656.html Sent from the OpenSSL - User mailing list archive at Nabble.com. __ OpenSSL Project

RE: One CA for many clients (a silly question)

2009-07-19 Thread PMHager
covers the needs of the IETF. Peter -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Patrick Patterson Sent: Sunday, July 19, 2009 12:40 AM To: openssl-users@openssl.org Subject: Re: One CA for many clients (a silly question) Hi

Re: One CA for many clients (a silly question)

2009-07-18 Thread Patrick Patterson
Hi there: PMHager wrote: > Correct, as I already denoted these are from the obsolete RFC2459. > > As the IETF/PKIX charter could not define a consenting set of flags, > Steve Kent had suggested to drop them and leave it to the IPsec WG. > This has been done by RFC4809: Its recommendation is not

RE: One CA for many clients (a silly question)

2009-07-18 Thread PMHager
ehalf Of Kyle Hamilton Sent: Friday, July 17, 2009 7:11 PM To: openssl-users@openssl.org Subject: Re: One CA for many clients (a silly question) kp-ipsec* has been formally deprecated by the IETF ipsec working group, and thus if any implementation demands that they're there it's a bug i

Re: One CA for many clients (a silly question)

2009-07-17 Thread Kyle Hamilton
ou will need to test whether your > implementation does support them. > > Peter > > -Original Message- > From: owner-openssl-us...@openssl.org > [mailto:owner-openssl-us...@openssl.org] On Behalf > Of Dr. Stephen Henson > Sent: Thursday, July 16, 2009 6:24 PM > T

RE: One CA for many clients (a silly question)

2009-07-17 Thread PMHager
: One CA for many clients (a silly question) On Wed, Jul 15, 2009, stortoaranci wrote: > > Hi All, > > I just have a silly question on Openssl. > > I use a self-signed CA to sign several server/clients cert. > > For example I could use signed certs to implement an Ope

Re: One CA for many clients (a silly question)

2009-07-16 Thread Frans de Boer
thing produced by it. > > -Kyle H > > On Wed, Jul 15, 2009 at 11:29 PM, stortoaranci wrote: > > > > Hi All, > > > > I just have a silly question on Openssl. > > > > I use a self-signed CA to sign several server/clients cert. > > > > For e

Re: One CA for many clients (a silly question)

2009-07-16 Thread Kyle Hamilton
ranci wrote: > > Hi All, > > I just have a silly question on Openssl. > > I use a self-signed CA to sign several server/clients cert. > > For example I could use signed certs to implement an OpenVPN LAN and one > Wi-FI RADIUS auth for different clients. > > The ques

Re: One CA for many clients (a silly question)

2009-07-16 Thread Dr. Stephen Henson
On Wed, Jul 15, 2009, stortoaranci wrote: > > Hi All, > > I just have a silly question on Openssl. > > I use a self-signed CA to sign several server/clients cert. > > For example I could use signed certs to implement an OpenVPN LAN and one > Wi-FI RADIUS auth for

Re: One CA for many clients (a silly question)

2009-07-16 Thread Patrick Patterson
stortoaranci wrote: > Hi All, > > I just have a silly question on Openssl. > > I use a self-signed CA to sign several server/clients cert. > > For example I could use signed certs to implement an OpenVPN LAN and one > Wi-FI RADIUS auth for different clients. > &g

One CA for many clients (a silly question)

2009-07-16 Thread stortoaranci
Hi All, I just have a silly question on Openssl. I use a self-signed CA to sign several server/clients cert. For example I could use signed certs to implement an OpenVPN LAN and one Wi-FI RADIUS auth for different clients. The question is: "how to be sure that a client allowed to use the

RE: silly question

2000-11-24 Thread Roberto Lopez Navarro
Would it be possible to have a look at the certificates? > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Ugron, Zoltan > Sent: viernes, 24 de noviembre de 2000 15:38 > To: '[EMAIL PROTECTED]' > Subject: silly question

silly question

2000-11-24 Thread Ugron, Zoltan
Hello, What can be the problem if I created some certificates under netscape and under ie (their status are OK, they are placed under personal certs. Verify says OK). But when I try to use them, the browser said that I have no certificate at all! thnks, > _