RE: Open Source Certificate authority

["Lapinski, Michael (Research)" <lapinski () crd ge com>]

openssl is what your looking for.


<quote  src=`man openssl`>
    OpenSSL is a cryptography toolkit implementing the Secure Sockets Layer
(SSL v2/v3) and Transport Layer Security (TLS
       v1) network protocols and related cryptography standards required by
them.
 
       The openssl program is a command line tool for using the various
cryptography functions of OpenSSL's crypto library
       from the shell.  It can be used for
 
        o  Creation of RSA, DH and DSA key parameters
        o  Creation of X.509 certificates, CSRs and CRLs
        o  Calculation of Message Digests
        o  Encryption and Decryption with Ciphers
        o  SSL/TLS Client and Server Tests
        o  Handling of S/MIME signed or encrypted mail

</quote>


-mtl
--------------------------------------------------
Michael Lapinski
Computer Scientist
GE Research


"I think there is a world market for maybe five computers."
            - IBM Chairman Thomas Watson, 1943

-----Original Message-----
From: Tenorio, Leandro [mailto:ltenorio () intelaction com] 
Sent: Tuesday, September 23, 2003 11:05 AM
To: Jared Ingersoll; sectools () securityfocus com
Cc: webappsec () securityfocus com
Subject: RE: Open Source Certificate authority


Try MS Cerification Server from w2k server, simple and easy to use.



-----Original Message-----
From: Jared Ingersoll [mailto:jared () cswv com] 
Sent: Tuesday, September 23, 2003 11:25 AM
To: 'sectools () securityfocus com'
Cc: 'webappsec () securityfocus com'
Subject: Open Source Certificate authority

Hi Folks, 

I am looking for an open source or freely available tool (and/or
documentation) that I can use to create 40-bit https certificates to use in
conjunction with iPLanet 6 (SunOne) enterprise servers on SunOS. We
currently are in the middle of a project of creating a QA environment where
we need to duplicate several sites served over https. Obviously, these certs
will need to work with common browsers such as IE and Netscape. Currently we
use verisign to create these certs, but at $250 a pop, the cost adds up
quickly. I'm open to any unix variant or MS platform.


gracias,
jared