Certificates and export

Hi, I am in US and have to deal with export regulations on the encryption level. Does anyone know how the private/public key length is affected by those? Should the keys be 512 bits? The private key is encrypted (using DES - right?). Do the export regulations on DES key length apply here? If p

Re: S/MIME and Outlook98/2000

According to Netscape, your test signature has no indication of who issued the certificate. Unless Netscape recognizes the issuer of the certificate the signature will appear as invalid. Pierre De Boeck wrote: > Yes and your signature is ok. > > Our smtp server is responsible? But why it works wi

RE: detecting servers close connection

Set your scocket in non blocking mode. Then your BIO_write will return always immediately and - if it return a value <=0 and - should_retry is false, you know that a critical error has occured like a closure of the connection. - should_

gendsa bugfix(?) and DSA question in general

First I have a question about the gendsa command in both 0.9.3a and SNAP-19990713. It appears that contrary to the usage command you have to specify -des -des3 or -idea after the dsaparam-file argument on the command line. The offending code is in apps/gendsa.c: argv++; argc--; for (;;)

RE: MSIE certificate expiration problem

Is it possible MSIE is somehow confusing local time and GMT time ? > -Original Message- > From: Holger Reif [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, July 14, 1999 3:36 AM > To: [EMAIL PROTECTED] > Subject: Re: MSIE certificate expiration problem > > > Radovan Semancik schr

detecting servers close connection

can someonbe suggest a way to detect if the server has closed the connection before you atempt to write to an ssl_bio? the context is non-blocking io thanks, -rick __ OpenSSL Project http:

Re: openSSL => 128bit encryption on IIS?

Juan Carlos Castro y Castro wrote: > > This is not to answer the question (whose answer is not unless OpenSSL > supports SGC) which it does, but I don't really see how that helps. > but to make another related (and slightly offtopic) > question: if I find a 128-bit upgrade to MSIE already lying

Re: Make errors on LInux

hi, i have noticed that myself on the most recent linux based implementations you need to pull down the development libraries for the linux version you are using and install it. for some reason these are not installed in the custom, workstation, or server installs for rpm based systems. i have

Re: openSSL => 128bit encryption on IIS?

This is not to answer the question (whose answer is not unless OpenSSL supports SGC), but to make another related (and slightly offtopic) question: if I find a 128-bit upgrade to MSIE already lying on a server outside the US (say in Germany), then I download and install it for use here (Brazil), a

RE: S/MIME and Outlook98/2000

Yes and your signature is ok. Our smtp server is responsible? But why it works wihout problem when I use just this one!!! The problems occurs only when the mails cross several MTA. Could you tell me if that signed reply was altered? I note also that you use Netscape instead of Outlook. > -O

openSSL => 128bit encryption on IIS?

Can I use openSSL to achieve 128bit encryption on IIS4.0? Thanks, Bo __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager

Re: S/MIME and Outlook98/2000

- Hi I think your mail-server for outgoing smtp-connections alter your messages. I use S/MIME without any problems all over the world with almost everkind of MTA and SMTP-servers. Can you verify S/MIME-Signatures, for example this.? -- Schlund + Partner AG Erbprinzenstr. 4-12