[rabbitmq-discuss] SSL

[SAG - Jonathan Andrés]

Thank you again!

I'm trying to run the file dumpasn1.c but is giving me problems (not usually work with C).
Do you think there are a problematic string in the certificate? I use it every day in https conections.

Is there any way to increase the level of rabitMq logs?

This is the ASN.1 dump:


SEQUENCE
{
    INTEGER=2
    INTEGER=364
    SEQUENCE
    {
        OBJECT IDENTIFIER=SHA-1 with RSA Encryption (1.2.840.113549.1.1.5)
        NULL
    }
    SEQUENCE
    {
        SET
        {
            SEQUENCE
            {
                OBJECT IDENTIFIER=Organization (2.5.4.10)
                PRINTABLE STRING=OMEL PKI Domain
            }
        }
        SET
        {
            SEQUENCE
            {
                OBJECT IDENTIFIER=Common Name (2.5.4.3)
                PRINTABLE STRING=omelCA
            }
        }
    }
    SEQUENCE
    {
        UTC TIME=03/may/2010 16:48:59 CEST (100503144859Z)
        UTC TIME=02/may/2013 16:48:59 CEST (130502144859Z)
    }
    SEQUENCE
    {
        SET
        {
            SEQUENCE
            {
                OBJECT IDENTIFIER=Country (2.5.4.6)
                PRINTABLE STRING=ES
            }
        }
        SET
        {
            SEQUENCE
            {
                OBJECT IDENTIFIER=Organization (2.5.4.10)
                PRINTABLE STRING=OMEL
            }
        }
        SET
        {
            SEQUENCE
            {
                OBJECT IDENTIFIER=Organizational Unit (2.5.4.11)
                PRINTABLE STRING=OM
            }
        }
        SET
        {
            SEQUENCE
            {
                OBJECT IDENTIFIER=Common Name (2.5.4.3)
                PRINTABLE STRING=DSISOFT1
            }
        }
        SET
        {
            SEQUENCE
            {
                OBJECT IDENTIFIER=0.9.2342.19200300.100.1.1
                PRINTABLE STRING=DSISOFT1
            }
        }
    }
    SEQUENCE
    {
        SEQUENCE
        {
            OBJECT IDENTIFIER=RSA encryption (1.2.840.113549.1.1.1)
            NULL
        }
        BIT STRING=
01010010010110001101100110010000001000000011000000010000000000000001
    }
    SEQUENCE
    {
        SEQUENCE
        {
            OBJECT IDENTIFIER=Authority Key Identifier (2.5.29.35)
            OCTET STRING=
                30 16 80 14 D6 CA 47 8A   0...ÖÊG.
                07 63 C1 70 F7 66 A7 1B   .cÁp÷f§.
                4B D6 AC 41 5E 79 B4 78   KÖ¬A^y´x
        }
        SEQUENCE
        {
            OBJECT IDENTIFIER=Authority Info Access (1.3.6.1.5.5.7.1.1)
            OCTET STRING=
                30 32 30 30 06 08 2B 06   0200..+.
                01 05 05 07 30 01 86 24   ....0..$
                68 74 74 70 3A 2F 2F 43   http://C
                45 52 54 31 2D 4F 4D 2E   ERT1-OM.
                4F 4D 45 4C 2E 45 53 3A   OMEL.ES:
                39 30 38 30 2F 63 61 2F   9080/ca/
                6F 63 73 70               ocsp
        }
        SEQUENCE
        {
            OBJECT IDENTIFIER=Key Usage (2.5.29.15)
            BOOLEAN=true
            OCTET STRING=
                03 02 05 E0               ...à
        }
        SEQUENCE
        {
            OBJECT IDENTIFIER=Extended key usage (2.5.29.37)
            OCTET STRING=
                30 14 06 08 2B 06 01 05   0...+...
                05 07 03 02 06 08 2B 06   ......+.
                01 05 05 07 03 04         ......
        }
        SEQUENCE
        {
            OBJECT IDENTIFIER=Subject Alternative Name (2.5.29.17)
            OCTET STRING=
                30 1D 81 1B 53 69 73 74   0...Sist
                65 6D 61 73 49 6E 66 6F   emasInfo
                72 6D 61 63 69 6F 6E 40   rmacion@
                6F 6D 65 6C 2E 65 73      omel.es
        }
    }
}


Thank you again! 





-----Mensaje original-----
De: Emile Joubert [mailto:emile at rabbitmq.com] 
Enviado el: viernes, 05 de abril de 2013 13:05
Para: Discussions about RabbitMQ
CC: SAG - Jonathan Andrés
Asunto: Re: [rabbitmq-discuss] SSL

On 05/04/13 10:38, SAG - Jonathan Andrés wrote:
> I can not send it because it is a certificate used in our company

Can you provide an ASN.1 dump of the part of the certificate containing the problematic string? Running this on the DER version of the certificate should show enough useful information to debug:

http://www.cs.auckland.ac.nz/~pgut001/dumpasn1.c



-Emile