[Fwd: Re: Open SSL Certificate]

2001-08-28 Thread Marcel Welschbillig
Just answering my own question incase it helps anyone, the following command did it for me ! openssl req -new -out cert.csr Too easy. PS Thanks Jeremy for puting me on to www.openssl.org Marcel Original Message Subject: Re: Open SSL Certificate Date: Tue, 28 Aug 2001 21:2

Re: Open SSL Certificate

2001-08-28 Thread Jeremy B
The OpenSSL web site (http://www.openssl.org) has some rather good documentation on how to generate the certificates and setting up a CA... Jeremy On Wed, Aug 29, 2001 at 12:09:20PM +0800, Marcel Welschbillig wrote: > Can anybody tell me how to create a Certificate Signature Requ

Open SSL Certificate

2001-08-28 Thread Marcel Welschbillig
Can anybody tell me how to create a Certificate Signature Request using openssl ?? I have tried /etc/ssl# openssl req test But get the following error Using configuration from /usr/lib/ssl/openssl.cnf unable to load X509 request 857:error:02001002:system library:fopen:system lib:bss_file.c:1

Re: Open SSL Certificate

2001-08-28 Thread Jeremy B
The OpenSSL web site (http://www.openssl.org) has some rather good documentation on how to generate the certificates and setting up a CA... Jeremy On Wed, Aug 29, 2001 at 12:09:20PM +0800, Marcel Welschbillig wrote: > Can anybody tell me how to create a Certificate Signature Req

Open SSL Certificate

2001-08-28 Thread Marcel Welschbillig
Can anybody tell me how to create a Certificate Signature Request using openssl ?? I have tried /etc/ssl# openssl req test But get the following error Using configuration from /usr/lib/ssl/openssl.cnf unable to load X509 request 857:error:02001002:system library:fopen:system lib:bss_file.c:1

Re: Sniffing SSH and HTTPS

2001-08-28 Thread Hubert Chan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > "Richard" == Richard <[EMAIL PROTECTED]> writes: [...] Richard> There also an analasis of the ssh packetstream revealing the Richard> number of chars in the passwd. Small clarification: this may reveal the number of characters in any password

Re: Sniffing SSH and HTTPS

2001-08-28 Thread Ethan Benson
On Tue, Aug 28, 2001 at 06:44:59PM +0200, Davy Gigan wrote: > Jan-Hendrik Palic writes: > > http://ettercap.sourceforge.net/ > > > > Is it possible? Are SSH und HTTPS connections unsecure and how do we > > make is secure than? > > old ssh protocol v1.5 IS a security hole, you can snif it. I d

Re: [ OT ] local packages vs official packages

2001-08-28 Thread Hubert Chan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > "Samu" == Samu <[EMAIL PROTECTED]> writes: Samu> hi, this is just a curiosity, i think is not so security related, Samu> aniway... if i made a package by my self, or from deb sources, of Samu> a package that already exist on to the debian db,

Re: Crypto

2001-08-28 Thread Hubert Chan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > "Martin" == Martin Peikert <[EMAIL PROTECTED]> writes: Martin> John DOE <[EMAIL PROTECTED]> wrote: >> Hello everybody, I want to have some information about what kind of >> cryptological benefits does my linux server offer to me . I searched >>

Re: Linux LDAP problem

2001-08-28 Thread Lupe Christoph
On Tuesday, 2001-08-28 at 17:15:58 +0200, Sergio Talens-Oliag wrote: > El Tue, Aug 28, 2001 at 09:23:47AM -0400, Sunny Dubey escribió: > > Anyone have any clue as to how to make it work? Are there any docs about > > getting Netware+linux+ldap to work? thanks for any info that you might > > pa

Re: Secure Network Filesystem

2001-08-28 Thread Karun
Ronny Adsetts wrote: The point is: we are with new requirements of sharing some filesystems accross the network (Intranet and DMZ). I would like to know from you what is suggested in terms of use X security. I really would not like to use NFS. Any clues? Coda? How 'bout running a VPN between

Re: Secure Network Filesystem

2001-08-28 Thread Mike Renfro
On Tue, Aug 28, 2001 at 02:31:20PM -0300, Alisson Sellaro wrote: > I would like to know from you what is suggested in terms of use X > security. I really would not like to use NFS. Any clues? Coda? SFS -- www.fs.net It wasn't a speed demon by any stretch of the imagination during my tests, but t

Re: Sniffing SSH and HTTPS

2001-08-28 Thread Hubert Chan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > "Richard" == Richard <[EMAIL PROTECTED]> writes: [...] Richard> There also an analasis of the ssh packetstream revealing the Richard> number of chars in the passwd. Small clarification: this may reveal the number of characters in any passwor

Re: Sniffing SSH and HTTPS

2001-08-28 Thread Ethan Benson
On Tue, Aug 28, 2001 at 06:44:59PM +0200, Davy Gigan wrote: > Jan-Hendrik Palic writes: > > http://ettercap.sourceforge.net/ > > > > Is it possible? Are SSH und HTTPS connections unsecure and how do we > > make is secure than? > > old ssh protocol v1.5 IS a security hole, you can snif it. I

RE: Secure Network Filesystem

2001-08-28 Thread Ronny Adsetts
> The point is: we are with new requirements of sharing > some filesystems accross the network (Intranet and DMZ). > > I would like to know from you what is suggested in > terms of use X security. I really would not like to > use NFS. Any clues? Coda? How 'bout running a VPN between the networks t

Re: [ OT ] local packages vs official packages

2001-08-28 Thread Hubert Chan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > "Samu" == Samu <[EMAIL PROTECTED]> writes: Samu> hi, this is just a curiosity, i think is not so security related, Samu> aniway... if i made a package by my self, or from deb sources, of Samu> a package that already exist on to the debian db,

Re: Linux LDAP problem

2001-08-28 Thread Petro
On Tue, Aug 28, 2001 at 09:23:47AM -0400, Sunny Dubey wrote: > Hey, > I've got a slight problem, at school we run two major networks, one half is > Novell Netware based, and the other half is unix based. We basically one > centralized system of authentication, so that user don't have to remembe

Re: Crypto

2001-08-28 Thread Hubert Chan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > "Martin" == Martin Peikert <[EMAIL PROTECTED]> >writes: Martin> John DOE <[EMAIL PROTECTED]> wrote: >> Hello everybody, I want to have some information about what kind of >> cryptological benefits does my linux server offer to me . I searched

Re: Sniffing SSH and HTTPS

2001-08-28 Thread Alvin Oga
hi ya and for the list of the rest of the sniffers to check out... http://www.Linux-Sec.net/Sniffer one of the boxes i had over the past 3 years was sniffed ... probably ssh-1.x series ... just didnt know how they did it 3 yrs ago - no damage done ... but a good trick... have fu

Re: Secure Network Filesystem

2001-08-28 Thread Alvin Oga
hi ya alisson for secure NFS stuff.. ( dont have any experience in its security/comfort level ) http://www.Linux-Sec.net/services.gwif.html ( go to the bottom of the page ) have fun alvin On Tue, 28 Aug 2001, Alisson Sellaro wrote: > Hi there folks > > I'm planning a modifica

Re: Linux LDAP problem

2001-08-28 Thread Lupe Christoph
On Tuesday, 2001-08-28 at 17:15:58 +0200, Sergio Talens-Oliag wrote: > El Tue, Aug 28, 2001 at 09:23:47AM -0400, Sunny Dubey escribió: > > Anyone have any clue as to how to make it work? Are there any docs about > > getting Netware+linux+ldap to work? thanks for any info that you might pass

Re: Secure Network Filesystem

2001-08-28 Thread Karun
Ronny Adsetts wrote: >>The point is: we are with new requirements of sharing >>some filesystems accross the network (Intranet and DMZ). >> >>I would like to know from you what is suggested in >>terms of use X security. I really would not like to >>use NFS. Any clues? Coda? >> > >How 'bout running

Re: Secure Network Filesystem

2001-08-28 Thread Mike Renfro
On Tue, Aug 28, 2001 at 02:31:20PM -0300, Alisson Sellaro wrote: > I would like to know from you what is suggested in terms of use X > security. I really would not like to use NFS. Any clues? Coda? SFS -- www.fs.net It wasn't a speed demon by any stretch of the imagination during my tests, but

Re: Secure Network Filesystem

2001-08-28 Thread Emmanuel Valliet
(2001-08-28) Alisson Sellaro sed : | Hi there folks | | I'm planning a modification in the network of my departament | here. We have a pretty standard lay-out with a DMZ and a | screened subnet firewalling schema (two firewalls, one from | outside to our DMZ and other from the DMZ to our Int

Re: Sniffing SSH and HTTPS

2001-08-28 Thread Richard
On Tue, 28 Aug 2001, Jan-Hendrik Palic wrote: > Hi all... > > I have a small question. > > I found on SF a small tool, which may sniffing SSH and HTTPS (not > tested). > > The Url is : > > http://ettercap.sourceforge.net/ > > Is it possible? Are SSH und HTTPS connections unsecure and how do

RE: Secure Network Filesystem

2001-08-28 Thread Ronny Adsetts
> The point is: we are with new requirements of sharing > some filesystems accross the network (Intranet and DMZ). > > I would like to know from you what is suggested in > terms of use X security. I really would not like to > use NFS. Any clues? Coda? How 'bout running a VPN between the networks

Re: Sniffing SSH and HTTPS

2001-08-28 Thread Davy Gigan
Jan-Hendrik Palic writes: > >Don't know for https, but that's not a surprise then. > > Why? https is based on ssl, so does ssh, if one can be sniffed, why wouln't it be same for the other ? I think (and i may (must) be wrong) that https sniffing is based on weakness of ssl when used in https (

Re: Linux LDAP problem

2001-08-28 Thread Petro
On Tue, Aug 28, 2001 at 09:23:47AM -0400, Sunny Dubey wrote: > Hey, > I've got a slight problem, at school we run two major networks, one half is > Novell Netware based, and the other half is unix based. We basically one > centralized system of authentication, so that user don't have to rememb

Re: Sniffing SSH and HTTPS

2001-08-28 Thread Alvin Oga
hi ya and for the list of the rest of the sniffers to check out... http://www.Linux-Sec.net/Sniffer one of the boxes i had over the past 3 years was sniffed ... probably ssh-1.x series ... just didnt know how they did it 3 yrs ago - no damage done ... but a good trick... have f

Re: Sniffing SSH and HTTPS

2001-08-28 Thread Davy Gigan
Jan-Hendrik Palic writes: > >Don't know for https, but that's not a surprise then. > > Why? Because of the sentence below : 'Remember there is no 100% secure software.' ;-) -- Davy Gigan System & Network Administration University Of Caen (France)

Re: Secure Network Filesystem

2001-08-28 Thread Alvin Oga
hi ya alisson for secure NFS stuff.. ( dont have any experience in its security/comfort level ) http://www.Linux-Sec.net/services.gwif.html ( go to the bottom of the page ) have fun alvin On Tue, 28 Aug 2001, Alisson Sellaro wrote: > Hi there folks > > I'm planning a modific

Re: Sniffing SSH and HTTPS

2001-08-28 Thread Jan-Hendrik Palic
Hi .. On Tue, Aug 28, 2001 at 06:44:59PM +0200, Davy Gigan wrote: >Jan-Hendrik Palic writes: > > http://ettercap.sourceforge.net/ > > > > Is it possible? Are SSH und HTTPS connections unsecure and how do we > > make is secure than? >old ssh protocol v1.5 IS a security hole, you can snif it. I don

Secure Network Filesystem

2001-08-28 Thread Alisson Sellaro
Hi there folks I'm planning a modification in the network of my departament here. We have a pretty standard lay-out with a DMZ and a screened subnet firewalling schema (two firewalls, one from outside to our DMZ and other from the DMZ to our Intranet). The point is: we are with new requirements

Re: Sniffing SSH and HTTPS

2001-08-28 Thread Davy Gigan
Jan-Hendrik Palic writes: > http://ettercap.sourceforge.net/ > > Is it possible? Are SSH und HTTPS connections unsecure and how do we > make is secure than? old ssh protocol v1.5 IS a security hole, you can snif it. I don't know any vulnerability for the last OpenSSH_2.9p2 or OpenSSH_2.5.2p2

Re: Secure Network Filesystem

2001-08-28 Thread Emmanuel Valliet
(2001-08-28) Alisson Sellaro sed : | Hi there folks | | I'm planning a modification in the network of my departament | here. We have a pretty standard lay-out with a DMZ and a | screened subnet firewalling schema (two firewalls, one from | outside to our DMZ and other from the DMZ to our In

Re: Sniffing SSH and HTTPS

2001-08-28 Thread Richard
On Tue, 28 Aug 2001, Jan-Hendrik Palic wrote: > Hi all... > > I have a small question. > > I found on SF a small tool, which may sniffing SSH and HTTPS (not > tested). > > The Url is : > > http://ettercap.sourceforge.net/ > > Is it possible? Are SSH und HTTPS connections unsecure and how do

Sniffing SSH and HTTPS

2001-08-28 Thread Jan-Hendrik Palic
Hi all... I have a small question. I found on SF a small tool, which may sniffing SSH and HTTPS (not tested). The Url is : http://ettercap.sourceforge.net/ Is it possible? Are SSH und HTTPS connections unsecure and how do we make is secure than? Greetings

Re: Sniffing SSH and HTTPS

2001-08-28 Thread Davy Gigan
Jan-Hendrik Palic writes: > >Don't know for https, but that's not a surprise then. > > Why? https is based on ssl, so does ssh, if one can be sniffed, why wouln't it be same for the other ? I think (and i may (must) be wrong) that https sniffing is based on weakness of ssl when used in https (

Re: Sniffing SSH and HTTPS

2001-08-28 Thread Davy Gigan
Jan-Hendrik Palic writes: > >Don't know for https, but that's not a surprise then. > > Why? Because of the sentence below : 'Remember there is no 100% secure software.' ;-) -- Davy Gigan System & Network Administration University Of Caen (France) -- To UNSUBSCRIBE, email to [EMAIL PROTECT

Re: Linux LDAP problem

2001-08-28 Thread Sergio Talens-Oliag
El Tue, Aug 28, 2001 at 09:23:47AM -0400, Sunny Dubey escribió: > Hey, > > I've got a slight problem, at school we run two major networks, one half is > Novell Netware based, and the other half is unix based. We basically one > centralized system of authentication, so that user don't have to r

Re: Sniffing SSH and HTTPS

2001-08-28 Thread Jan-Hendrik Palic
Hi .. On Tue, Aug 28, 2001 at 06:44:59PM +0200, Davy Gigan wrote: >Jan-Hendrik Palic writes: > > http://ettercap.sourceforge.net/ > > > > Is it possible? Are SSH und HTTPS connections unsecure and how do we > > make is secure than? >old ssh protocol v1.5 IS a security hole, you can snif it. I do

Secure Network Filesystem

2001-08-28 Thread Alisson Sellaro
Hi there folks I'm planning a modification in the network of my departament here. We have a pretty standard lay-out with a DMZ and a screened subnet firewalling schema (two firewalls, one from outside to our DMZ and other from the DMZ to our Intranet). The point is: we are with new requirement

Re: Crypto

2001-08-28 Thread Brian P. Flaherty
John DOE <[EMAIL PROTECTED]> writes: > Hello everybody, > I want to have some information about what kind of cryptological benefits > does my linux server offer to me . I searched linuxdoc.org but could not find > a howo about linux cryptology. Could you please guide me to a web site or to > a

Re: Sniffing SSH and HTTPS

2001-08-28 Thread Davy Gigan
Jan-Hendrik Palic writes: > http://ettercap.sourceforge.net/ > > Is it possible? Are SSH und HTTPS connections unsecure and how do we > make is secure than? old ssh protocol v1.5 IS a security hole, you can snif it. I don't know any vulnerability for the last OpenSSH_2.9p2 or OpenSSH_2.5.2p

Re: Crypto

2001-08-28 Thread Martin Peikert
John DOE <[EMAIL PROTECTED]> wrote: > Hello everybody, > I want to have some information about what kind of cryptological > benefits does my linux server offer to me . I searched > linuxdoc.org but could not find a howo about linux cryptology. > Could you please guide me to a web site

Sniffing SSH and HTTPS

2001-08-28 Thread Jan-Hendrik Palic
Hi all... I have a small question. I found on SF a small tool, which may sniffing SSH and HTTPS (not tested). The Url is : http://ettercap.sourceforge.net/ Is it possible? Are SSH und HTTPS connections unsecure and how do we make is secure than? Greetings

Re: [ OT ] local packages vs official packages

2001-08-28 Thread Steve Greenland
On 27-Aug-01, 17:25 (CDT), Samu <[EMAIL PROTECTED]> wrote: > hi, > this is just a curiosity, i think is not so security related, aniway... So it should be on the debian-user list. > if i made a package by my self, or from deb sources, of a package > that already exist on to the debian db, and my

Linux LDAP problem

2001-08-28 Thread Sunny Dubey
Hey, I've got a slight problem, at school we run two major networks, one half is Novell Netware based, and the other half is unix based. We basically one centralized system of authentication, so that user don't have to remember two different passwords to use either system. We been trying to

Re: Linux LDAP problem

2001-08-28 Thread Sergio Talens-Oliag
El Tue, Aug 28, 2001 at 09:23:47AM -0400, Sunny Dubey escribió: > Hey, > > I've got a slight problem, at school we run two major networks, one half is > Novell Netware based, and the other half is unix based. We basically one > centralized system of authentication, so that user don't have to

Crypto

2001-08-28 Thread John DOE
Hello everybody, I want to have some information about what kind of cryptological benefits does my linux server offer to me . I searched linuxdoc.org but could not find a howo about linux cryptology. Could you please guide me to a web site or to a documentation site where I can start from the no

Re: Crypto

2001-08-28 Thread Brian P. Flaherty
John DOE <[EMAIL PROTECTED]> writes: > Hello everybody, > I want to have some information about what kind of cryptological benefits does my >linux server offer to me . I searched linuxdoc.org but could not find a howo about >linux cryptology. Could you please guide me to a web site or to a docu

Re: Crypto

2001-08-28 Thread Martin Peikert
John DOE <[EMAIL PROTECTED]> wrote: > Hello everybody, > I want to have some information about what kind of cryptological > benefits does my linux server offer to me . I searched > linuxdoc.org but could not find a howo about linux cryptology. > Could you please guide me to a web site

Re: [ OT ] local packages vs official packages

2001-08-28 Thread Steve Greenland
On 27-Aug-01, 17:25 (CDT), Samu <[EMAIL PROTECTED]> wrote: > hi, > this is just a curiosity, i think is not so security related, aniway... So it should be on the debian-user list. > if i made a package by my self, or from deb sources, of a package > that already exist on to the debian db, and m

Linux LDAP problem

2001-08-28 Thread Sunny Dubey
Hey, I've got a slight problem, at school we run two major networks, one half is Novell Netware based, and the other half is unix based. We basically one centralized system of authentication, so that user don't have to remember two different passwords to use either system. We been trying to

Crypto

2001-08-28 Thread John DOE
Hello everybody, I want to have some information about what kind of cryptological benefits does my linux server offer to me . I searched linuxdoc.org but could not find a howo about linux cryptology. Could you please guide me to a web site or to a documentation site where I can start from the n

Re: Running root commands by http (END)

2001-08-28 Thread Emmanuel Lacour
On Thu, 23 Aug 2001 11:09:59 -0500 " Paul C. Nendick " <[EMAIL PROTECTED]> wrote: > The reason the web based solution to this is not forthcoming is > that this is not a web problem. The real solution is to hire > trustworthy admins capable of learning the right way to admin > their systems. I

Re: Running root commands by http (END)

2001-08-28 Thread Emmanuel Lacour
On Thu, 23 Aug 2001 11:09:59 -0500 " Paul C. Nendick " <[EMAIL PROTECTED]> wrote: > The reason the web based solution to this is not forthcoming is > that this is not a web problem. The real solution is to hire > trustworthy admins capable of learning the right way to admin > their systems.