From owner-freebsd-security Sun Jan 3 08:36:35 1999 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id IAA09937 for freebsd-security-outgoing; Sun, 3 Jan 1999 08:36:35 -0800 (PST) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from proxy4.ba.best.com (proxy4.ba.best.com [206.184.139.15]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id IAA09932 for ; Sun, 3 Jan 1999 08:36:34 -0800 (PST) (envelope-from FreeBSD-security@darkart.com) Received: from dynamic62.pm08.sf3d.best.com (dynamic37.pm04.sf3d.best.com [209.24.234.229]) by proxy4.ba.best.com (8.9.1/8.9.0/best.out) with ESMTP id IAA23164 for ; Sun, 3 Jan 1999 08:35:17 -0800 (PST) Message-Id: In-Reply-To: <199901012041.PAA11110@khavrinen.lcs.mit.edu> References: <199901011958.OAA11009@khavrinen.lcs.mit.edu> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Date: Sun, 3 Jan 1999 08:34:05 -0800 To: security@FreeBSD.ORG From: Eric Hall Subject: Re: Anyone know of a free X.509 CA? Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org >< >said: > >> On Fri, 1 Jan 1999, Garrett Wollman wrote: > >>> Does anyone out there know of a free X.509 CA that works under FreeBSD >>> (obviously) and supports PKCS#12 for interoperability with Netscrape? >>> > >> I haven't actually tried or tested it (this is probably the gotcha) but >> isn't SSLeay (/usr/ports/SSLeay) capable of that? > >I have, and it isn't. (It doesn't do PKCS#12, and the patches that I >found to do it still don't generate output that Netscrape is happy >with.) > I built SSLeay 0.9.0b under Solaris x86 and it worked just fine w/ Netscape (umm, 4.0x I think). Don't see why it should be any different under FreeBSD. I wasn't paying attention to which flavor of PKCS it was using at the time though. -eric To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message