[openssl.org #1157] asdasd

classic Classic list List threaded Threaded
4 messages Options
Reply | Threaded
Open this post in threaded view
|

[openssl.org #1157] asdasd

Rich Salz via RT

asdasdasczxczxczx
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [hidden email]
Automated List Manager                           [hidden email]
Reply | Threaded
Open this post in threaded view
|

openssl.cnf, please help: What is the difference between these 2 certificates?

David Templar
Hi,

I have attached 2 certificates (I have changed the extension to .txt as
the openssl forum does not accept .cer). The microsoft.txt is exported
from the browser and the david.txt is created by openssl and also
exported from the browser (IE).

The microsoft cert I can install on my motorola phone, but the openssl
cert can be installed (it is not fully recognized though).

How do I configure openssl to create a root certificate exactly like the
microsoft one (except for the key etc...)?

Thanks.

David

0‚0‚ú Á‹<<ˆÑ>öcìß@0  *†H†÷ 0p1+0)U "Copyright (c) 1997 Microsoft Corp.10U Microsoft Corporation1!0UMicrosoft Root Authority0 970110070000Z 201231070000Z0p1+0)U "Copyright (c) 1997 Microsoft Corp.10U Microsoft Corporation1!0UMicrosoft Root Authority0‚"0  *†H†÷ ‚0‚
‚©½Ápæ;òN(Ÿ—x^0ꢩ%_øþ•L£·þ¢ >|Q¢›¢`2kÑBdyî¬vÉTÚò뜆Ÿ„f³Åkzb#Ö<Þ’è–Ä¿-fššh&™Ð:,¿ µX&ÁFç
>8–,©(9¨ìIƒBã„»šlUa¬‚|¡`-wL陴d;šP1$Ÿ©ç‘+æ=˜c`XeŸ7R‡÷§ï”ÆÓ¿UE³‰€¿:ìT”N®ý§zmtN¯̖ (!W`i7»K<Vÿ[û¤f
¦ÒVWï¶;^wÚö¾®€•þ°ÍÖ§r\<ʼð£"0³…ɳ w…ߣ¨0¥0¢Uš0—€[Ðpïirž#Q~²MŽÿË¡r0p1+0)U "Copyright (c) 1997 Microsoft Corp.10U Microsoft Corporation1!0UMicrosoft Root Authority‚Á‹<<ˆÑ>öcìß@0  *†H†÷ ‚•è Àó—5í¸$Øwó\`2Ÿž Ë>‘ˆÉ:æ!òðW“,µ GÈbïü×Ì;;Z©6Tiþ$m?É̪Þ|Ý1=Ÿpj»þOiÀüÐCãZ Oêb{¯ªÈ+7%-¾e¡Š%c£÷Tù!ÉÖóR¬nC2ý‚øågl Qö½ñRǽçÄ0ü 1 ˆ•)MÕ¥ñ€à´[ô±ÝÈWîeIÇRT¶´(ÿÖð~¸—Å«7,äzä¨wãv Ðj?ÁÒ6ŠàA¨5jjÛ5áÔä¨EÈZ38nM b·
¢ŒÓÕT?FÍU¦pÛ:‡“uŸ§Ò 
0‚×0‚¿  ‰§qP>RŸ„0  *†H†÷ 0P10U  David Templar10U Copyright 200710UDavid Root Authority0 050713154124Z 050812154124Z0P10U  David Templar10U Copyright 200710UDavid Root Authority0‚"0  *†H†÷ ‚0‚
‚ïôû|ï$†ñ 
;ƒ>ǐžö«Žº®îæ˜Nׄfƒátï˲¹z_ Š’Fåá‚Ž´Êþ\Øÿ  »ðÇ3õʏzå»:(cd‘ð^#G£8†ÎìÆ´´6ŠuwE®o§9™%¢¤
'£Jƒ¢òð[„x_ï«iéBÀ¬øÄÅ!õðߗÅ(Äǡͨ’-¼®"(&ŒÕÑçË">nKwa+Ø Zžù5VXK¾v½œjºË¢PB!!ãžúx3÷¹¥vW‹[44<mM}Ae÷%ûjÛË穤y( ·eIOÜ! + XÆgJ®–yJð[Úd†ò+£³0°0U£­ ÛâP3h¾;Ðs’Ÿ$0€U#y0w€£­ ÛâP3h¾;Ðs’Ÿ$¡T¤R0P10U  David Templar10U Copyright 200710UDavid Root Authority‚ ‰§qP>RŸ„0 U0ÿ0  *†H†÷ ‚ª-nÿ&ý_O¥ƒŸíãz¶‘ºÅfÖUø¢dP óq‘!TçÂÌ.HCãëÂüþŽ¹S¢X[p&hQ›áþóUP]N‡d¬YWÂew^ïÑß+½ùƒº/VŠn&ïtå%ÀäË1çw÷œ¾ïh€vn»ôΐõßÖÓEçìK‘F.Ԙ9ÀÝԔ.xØEò…6úÖ¶ðÅçÂà&íÅp¶í÷v9çÞ·.nËó–wö4¼Sð¤ºÜ ‰Á¤ùIXŸÀ¸B‘{d¿ËËúg
ÇÃ2}~Õv?° y×Ëaáý°èbñ] T7AK è°‡—€e4'çö
Reply | Threaded
Open this post in threaded view
|

Re: openssl.cnf, please help: What is the difference between these 2 certificates?

Roumen Petrov
Certs are with different "Signature Algorithm" - david with sha1WithRSAEncryption and other md5WithRSAEncryption.
What about to set in openssl configuration file in ca section "default_md = md5" ?

David Templar wrote:

> Hi,
>
> I have attached 2 certificates (I have changed the extension to .txt as
> the openssl forum does not accept .cer). The microsoft.txt is exported
> from the browser and the david.txt is created by openssl and also
> exported from the browser (IE).
>
> The microsoft cert I can install on my motorola phone, but the openssl
> cert can be installed (it is not fully recognized though).
>
> How do I configure openssl to create a root certificate exactly like the
> microsoft one (except for the key etc...)?
>
> Thanks.
>
> David
>
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [hidden email]
Automated List Manager                           [hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: openssl.cnf, please help: What is the difference between these 2 certificates?

David Templar
<cid:[hidden email]>Thanks, I have tried that now,
but still it does not work - I think the openssl generated cert either
adds some extra objects or it does not add some objects.
There may be a simpler option: I have created a cert using keytool that
does work on the phone, only thing is that it is a x509 V1 - can I use
openssl to make it a V3 (without openssl changing anything else)?

Roumen Petrov wrote:

> Certs are with different "Signature Algorithm" - david with
> sha1WithRSAEncryption and other md5WithRSAEncryption.
> What about to set in openssl configuration file in ca section
> "default_md = md5" ?
>
> David Templar wrote:
>
>> Hi,
>>
>> I have attached 2 certificates (I have changed the extension to .txt
>> as the openssl forum does not accept .cer). The microsoft.txt is
>> exported from the browser and the david.txt is created by openssl and
>> also exported from the browser (IE).
>>
>> The microsoft cert I can install on my motorola phone, but the
>> openssl cert can be installed (it is not fully recognized though).
>>
>> How do I configure openssl to create a root certificate exactly like
>> the microsoft one (except for the key etc...)?
>>
>> Thanks.
>>
>> David
>>
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> Development Mailing List                       [hidden email]
> Automated List Manager                           [hidden email]
>

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [hidden email]
Automated List Manager                           [hidden email]