X-Spam-Check-By:	sourceware.org
To:	cygwin AT cygwin DOT com
From:	=?ISO-8859-1?Q?Ren=E9_Berber?= <r DOT berber AT computer DOT org>
Subject:	Re: Installing certificates (OpenSSL)
Date:	Thu, 02 Aug 2007 20:07:33 -0500
Lines:	27
Message-ID:	<f8tv4o$lto$1@sea.gmane.org>
References:	<Pine DOT OSF DOT 4 DOT 58 DOT 0708030147310 DOT 1117 AT ax0rm1 DOT roma1 DOT infn DOT it>
Mime-Version:	1.0
User-Agent:	Thunderbird 2.0.0.6 (Windows/20070728)
In-Reply-To:	<Pine.OSF.4.58.0708030147310.1117@ax0rm1.roma1.infn.it>
OpenPGP:	url=hkp://wwwkeys.pgp.net
X-IsSubscribed:	yes
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Unsubscribe:	<mailto:cygwin-unsubscribe-archive-cygwin=delorie DOT com AT cygwin DOT com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com

Angelo Graziosi wrote:

> To use Pine with OpenSSL I need to install a certificate : infn-ca.pem.
>=20
> HOW ?

	http://www.madboa.com/geek/pine-ssl/

> Copying infn-ca.pem in /usr/ssl/certs does not help.

There's a link from the hash-value.version to the real cert.  The hash valu=
e can
be calculated with `openssl x509 -hash -in ...`, from the output use just t=
he
first line, ignore the rest.

For instance, with my manually generated cert for imapd:

$ openssl x509 -hash -in /usr/ssl/certs/imapd.pem
9a99ba97
-----BEGIN CERTIFICATE-----
...

I would need to create `ln -s 9a99ba97.0 imapd.pem`.
--=20
Ren=E9 Berber


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -