openssl.cnf, please help: What is the difference between these 2 certificates?

classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

openssl.cnf, please help: What is the difference between these 2 certificates?

David Templar
Hi,

I have attached 2 certificates (I have changed the extension to .txt as
the openssl forum does not accept .cer). The microsoft.txt is exported
from the browser and the david.txt is created by openssl and also
exported from the browser (IE).

The microsoft cert I can install on my motorola phone, but the openssl
cert can be installed (it is not fully recognized though).

How do I configure openssl to create a root certificate exactly like the
microsoft one (except for the key etc...)?

Thanks.

David

0‚0‚ú Á‹<<ˆÑ>öcìß@0  *†H†÷ 0p1+0)U "Copyright (c) 1997 Microsoft Corp.10U Microsoft Corporation1!0UMicrosoft Root Authority0 970110070000Z 201231070000Z0p1+0)U "Copyright (c) 1997 Microsoft Corp.10U Microsoft Corporation1!0UMicrosoft Root Authority0‚"0  *†H†÷ ‚0‚
‚©½Ápæ;òN(Ÿ—x^0ꢩ%_øþ•L£·þ¢ >|Q¢›¢`2kÑBdyî¬vÉTÚò뜆Ÿ„f³Åkzb#Ö<Þ’è–Ä¿-fššh&™Ð:,¿ µX&ÁFç
>8–,©(9¨ìIƒBã„»šlUa¬‚|¡`-wL陴d;šP1$Ÿ©ç‘+æ=˜c`XeŸ7R‡÷§ï”ÆÓ¿UE³‰€¿:ìT”N®ý§zmtN¯̖ (!W`i7»K<Vÿ[û¤f
¦ÒVWï¶;^wÚö¾®€•þ°ÍÖ§r\<ʼð£"0³…ɳ w…ߣ¨0¥0¢Uš0—€[Ðpïirž#Q~²MŽÿË¡r0p1+0)U "Copyright (c) 1997 Microsoft Corp.10U Microsoft Corporation1!0UMicrosoft Root Authority‚Á‹<<ˆÑ>öcìß@0  *†H†÷ ‚•è Àó—5í¸$Øwó\`2Ÿž Ë>‘ˆÉ:æ!òðW“,µ GÈbïü×Ì;;Z©6Tiþ$m?É̪Þ|Ý1=Ÿpj»þOiÀüÐCãZ Oêb{¯ªÈ+7%-¾e¡Š%c£÷Tù!ÉÖóR¬nC2ý‚øågl Qö½ñRǽçÄ0ü 1 ˆ•)MÕ¥ñ€à´[ô±ÝÈWîeIÇRT¶´(ÿÖð~¸—Å«7,äzä¨wãv Ðj?ÁÒ6ŠàA¨5jjÛ5áÔä¨EÈZ38nM b·
¢ŒÓÕT?FÍU¦pÛ:‡“uŸ§Ò 
0‚×0‚¿  ‰§qP>RŸ„0  *†H†÷ 0P10U  David Templar10U Copyright 200710UDavid Root Authority0 050713154124Z 050812154124Z0P10U  David Templar10U Copyright 200710UDavid Root Authority0‚"0  *†H†÷ ‚0‚
‚ïôû|ï$†ñ 
;ƒ>ǐžö«Žº®îæ˜Nׄfƒátï˲¹z_ Š’Fåá‚Ž´Êþ\Øÿ  »ðÇ3õʏzå»:(cd‘ð^#G£8†ÎìÆ´´6ŠuwE®o§9™%¢¤
'£Jƒ¢òð[„x_ï«iéBÀ¬øÄÅ!õðߗÅ(Äǡͨ’-¼®"(&ŒÕÑçË">nKwa+Ø Zžù5VXK¾v½œjºË¢PB!!ãžúx3÷¹¥vW‹[44<mM}Ae÷%ûjÛË穤y( ·eIOÜ! + XÆgJ®–yJð[Úd†ò+£³0°0U£­ ÛâP3h¾;Ðs’Ÿ$0€U#y0w€£­ ÛâP3h¾;Ðs’Ÿ$¡T¤R0P10U  David Templar10U Copyright 200710UDavid Root Authority‚ ‰§qP>RŸ„0 U0ÿ0  *†H†÷ ‚ª-nÿ&ý_O¥ƒŸíãz¶‘ºÅfÖUø¢dP óq‘!TçÂÌ.HCãëÂüþŽ¹S¢X[p&hQ›áþóUP]N‡d¬YWÂew^ïÑß+½ùƒº/VŠn&ïtå%ÀäË1çw÷œ¾ïh€vn»ôΐõßÖÓEçìK‘F.Ԙ9ÀÝԔ.xØEò…6úÖ¶ðÅçÂà&íÅp¶í÷v9çÞ·.nËó–wö4¼Sð¤ºÜ ‰Á¤ùIXŸÀ¸B‘{d¿ËËúg
ÇÃ2}~Õv?° y×Ëaáý°èbñ] T7AK è°‡—€e4'çö
Reply | Threaded
Open this post in threaded view
|

Re: openssl.cnf, please help: What is the difference between these 2 certificates?

Roumen Petrov
Certs are with different "Signature Algorithm" - david with sha1WithRSAEncryption and other md5WithRSAEncryption.
What about to set in openssl configuration file in ca section "default_md = md5" ?

David Templar wrote:

> Hi,
>
> I have attached 2 certificates (I have changed the extension to .txt as
> the openssl forum does not accept .cer). The microsoft.txt is exported
> from the browser and the david.txt is created by openssl and also
> exported from the browser (IE).
>
> The microsoft cert I can install on my motorola phone, but the openssl
> cert can be installed (it is not fully recognized though).
>
> How do I configure openssl to create a root certificate exactly like the
> microsoft one (except for the key etc...)?
>
> Thanks.
>
> David
>
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [hidden email]
Automated List Manager                           [hidden email]