OpenSSL is an open-source implementation of the SSL and TLS protocols.
4
votes
2answers
275 views
Extensions for SSL server certificate
I have some question about the X.509 v3 extensions. What extensions should appear in a proper certificate for a SSL server ?
4
votes
2answers
1k views
openssl: recover key and IV by passphrase
A large amount of files were encrypted by
openssl enc -aes-256-cbc -pass pass:MYPASSWORD
Openssl should derive key+IV from passphrase. I'd like to know key+IV equivalent of that MYPASSWORD. Is ...
2
votes
1answer
200 views
Which extensions to use for a S/MIME certificate?
Analogously to the SSL server certificate question, which extensions should I use for S/MIME, and should the CA be restricted somehow as well?
(I'm using openssl, which at the moment creates CA and ...
1
vote
1answer
146 views
What is the difference between `extendedKeyUsage` and an application policy?
In some Microsoft articles like http://technet.microsoft.com/en-us/library/cc731792%28v=ws.10%29.aspx, I find some confusing statements like
Application policies are sometimes called extended key ...
