[Eisfair] Mails intern mit ssl

Jürgen Bombelczyk bludworscht at gmx.de
So Jul 20 10:28:56 CEST 2014


Hallo Marcus,

hier die Details:


> "cert details" für das ca und das imapd Zertifikat

-> CA Dtails

  Signature Algorithm: sha1WithRSAEncryption

         Issuer: C=DE, ST=Hessen, L=Seeheim, O=privat, OU=BA,
CN=JB/emailAddress=bludworscht at gmx.de

         Validity
             Not Before: May 12 16:37:51 2014 GMT
             Not After : May  9 16:37:51 2024 GMT
         Subject: C=DE, ST=Hessen, L=Seeheim, O=privat, OU=BA,
CN=JB/emailAddress=bludworscht at gmx.de

         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus: (jede Menge Hexcode entfernt)
                 Exponent: 65537 (0x10001)
             X509v3 extensions:
             X509v3 Basic Constraints: critical
                 CA:TRUE
             X509v3 Subject Key Identifier:
5B:2A:2B:D9:AA:81:20:BD:BE:72:D5:F9:A7:9C:4C:9A:0E:2F:22:17
             X509v3 Authority Key Identifier:
keyid:5B:2A:2B:D9:AA:81:20:BD:BE:72:D5:F9:A7:9C:4C:9A:0E:2F:22:17
DirName:/C=DE/ST=Hessen/L=Seeheim/O=privat/OU=BA/CN=JB/emailAddress=bludworscht at gmx.de
                 serial:D9:E6:6A:7B:67:8E:E0:CB

             X509v3 Key Usage:
                 Certificate Sign, CRL Sign
                 Netscape Cert Type:
                 SSL CA, S/MIME CA, Object Signing CA
             X509v3 Subject Alternative Name:
                 email:bludworscht at gmx.de
             X509v3 Issuer Alternative Name:
                 email:bludworscht at gmx.de
             X509v3 CRL Distribution Points:
                 Full Name:
                   URI:http://eis.lan.home:8080/certs/crl.pem
             Netscape Base Url:
                 http://eis.lan.home:8080/
             Netscape CA Policy Url:
                 URI:http://eis.lan.home:8080/certs/crl.pem
             Netscape Comment:
                 This certificate is a Root CA Certificate
     Signature Algorithm: sha1WithRSAEncryption
-----Hex code entfernt-----



-> imapd Details

Certificate: 
 
          Data:
     Version: 3 (0x2)
     Serial Number: 1 (0x1)
Signature Algorithm: sha1WithRSAEncryption
         Issuer: C=DE, ST=Hessen, L=Seeheim, O=privat, OU=BA, 
CN=JB/emailAddress=bludworscht at gmx.de
Validity 

             Not Before: May 12 18:41:21 2014 GMT
             Not After : May 12 18:41:21 2015 GMT

Subject: C=DE, ST=Hessen, L=Seeheim, O=privat, OU=BA,
CN=JB/emailAddress=bludworscht at gmx.de
Subject Public Key Info:
     Public Key Algorithm: rsaEncryption
     Public-Key: (2048bit)
     Modulus:(jede menge Hexcode entfernt)
     Exponent: 65537 (0x10001)

X509v3 extensions:
     X509v3 Key Usage:
         Digital Signature, Key Encipherment, Key Agreement
     X509v3 Subject Key Identifier:
34:57:6D:C7:BB:78:F2:F0:B8:C5:1E:37:7D:A8:21:F6:F8:6E:07:66
     X509v3 Authority Key Identifier:
        keyid:5B:2A:2B:D9:AA:81:20:BD:BE:72:D5:F9:A7:9C:4C:9A:0E:2F:22:17
        DirName:/C=DE/ST=Hessen/L=Seeheim/O=privat/OU=BA/CN=JB
        /emailAddress=bludworscht at gmx.de
        serial:D9:E6:6A:7B:67:8E:E0:CB

      X509v3 Subject Alternative Name:
          email:bludworscht at gmx.de

      X509v3 Issuer Alternative Name:
          email:bludworscht at gmx.de

      X509v3 CRL Distribution Points:
          Full Name:
            URI:http://eis.lan.home:8080/certs/crl.pem
      Netscape Cert Type:
          SSL Client, S/MIME
      Netscape Base Url:
          http://eis.lan.home:8080
      Netscape CA Policy Url:
          URI:http://eis.lan.home:8080/certs/crl.pem
      Netscape Comment:
           This certificate was issued by a User CA
      Netscape Revocation Url:
           cgi/non-CA-rev.cgi?


     Signature Algorithm: sha1WithRSAEncryption
-----Hex code entfernt-----



> "cert chain" für das imapd Zertifikat

certificate : imapd.pem (a20cf5a2)

subject     :
/C=DE/ST=Hessen/L=Seeheim/O=privat/OU=BA/CN=JB/emailAddress=bludworscht at gmx.de

  issuer      :
/C=DE/ST=Hessen/L=Seeheim/O=privat/OU=BA/CN=JB/emailAddress=bludworscht at gmx.de




Mehr Informationen über die Mailingliste Eisfair