RE: [cobalt-users] Cobalt Raq4 does not support 2048 bit certific ates

[Samir_Shukla <Samir_Shukla@xxxxxxxxxx>]

Hi Andras,

Acc..my prob is not to get cheap certificates.The basic problem is to make
my OpenSSL
support 2048 bit certificates.The problem is that when during Handshake or
whatever,,..verify is invoked on 2048 bit cert...it just throws "certificate
signature failure"...after loads of painstaking time i found the problem is
that the 2048 bit length cert is not recognised.
How do I upograde my OpenSSL in Cobalt without screwing Cobalt.

Please help!!

Best Regards,
Samir

-----Original Message-----
From: Andras Kende [mailto:andris1@xxxxxxxxxxx]
Sent: Friday, May 31, 2002 4:53 PM
To: Samir_Shukla@xxxxxxxxxx
Subject: Re: [cobalt-users] Cobalt Raq4 does not support 2048 bit
certificates


Hi Samir,

If you need a fast cheap solution you could try
http://www.freessl.com , it takes 10 minutes to have the cert ready for
free.
(free is only 3 month, but does the job...)

Andras


----- Original Message -----
From: "Samir_Shukla" <>
To: <cobalt-users@xxxxxxxxxxxxxxx>
Sent: Thursday, May 30, 2002 11:34 PM
Subject: [cobalt-users] Cobalt Raq4 does not support 2048 bit certificates


> Dear All,
>
> Cobalt Raq4 comes preinstalled with BSAFE software which uses modssl
toolkit
> with\OpenSSL.
> The verion of OpenSSL in Cobalt Raq4 is :0.9.5a April 2000.
> Upgrades of Cobalt are not supported and are very risky.
> It is very disheartening to note that Cobalt Raq4 server does not support
> 2048 bit certificates.
> It means that I cannot use ENtrust/Netrust client certificates as the CA
> root key for the
> same is 0f 2048 bit length.
> My client is almost on the verge of killin me.The reason is that Verisign
> certs can be used
> by client which are of ClassIII ,but they cost 350 USD. where as the
Netrust
> ones cost only
> 50 SGD.I need client authentication and we cannoot expect all users to buy
> such expensive certs.
> Please let me know a workaround to solve this 2048 bit keys problem.Is it
> possible for
> anybody to send me their OpenSSL executable..please??!!
> I am desperately looking forward for your help.
>
> Best Regards,
> Samir
> **************************************************************************
> This email (including any attachments) is intended for the sole use of the
> intended recipient/s and may contain material that is CONFIDENTIAL AND
> PRIVATE COMPANY INFORMATION. Any review or reliance by others or copying
or
> distribution or forwarding of any or all of the contents in this message
is
> STRICTLY PROHIBITED. If you are not the intended recipient, please contact
> the sender by email and delete all copies; your cooperation in this regard
> is appreciated.
> **************************************************************************
>
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To Subscribe or Unsubscribe, please go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
>
************************************************************************** 
This email (including any attachments) is intended for the sole use of the
intended recipient/s and may contain material that is CONFIDENTIAL AND
PRIVATE COMPANY INFORMATION. Any review or reliance by others or copying or
distribution or forwarding of any or all of the contents in this message is
STRICTLY PROHIBITED. If you are not the intended recipient, please contact
the sender by email and delete all copies; your cooperation in this regard
is appreciated.
**************************************************************************