DES-CBC3-MD5

1999-09-17 Thread Tim Canfield
I know that there have been some problems in the past with DES-CBC3-MD5. I am having problems connecting to a server I am writing with browsers when using this cipher. All the fixes I have seen have been on the client side. I also have a client which is similar to s_client. This has the same

Re: AbouT Expiration Time

1999-09-17 Thread Michael Ströder
Stefan Kelm wrote: > > Moin, > > > > However, at least the current browsers will not check a > > > certificate's > > > validity based on hours and minutes but based on days. > > > > M$ IE definitely checks hours and minutes. > > IE version? Service Pack version? IE 4 something. I did not chec

Re: What US companies need to know about RSA

1999-09-17 Thread Paul Khavkine
Well if you want to be illegal why bother downloading RSARef. Also you cant legally donload it anymore because RSA doesnt offer it for download anymore. I asked them about it and tey said that i have to by BSAFE or any other toolkits available fronm them. (I cant even afford buy Books, how the hel

Net::SSLeay, mod_perl and mod_ssl

1999-09-17 Thread Ričardas Čepas
Hi, Is it possible to use these things together? Net::SSLeay works when I start Apache without mod_ssl. With mod_ssl Apache gives [notice] caught SIGTERM, shutting down just after startup. What I need is to retrieve a page from remote https host. I probably can pl

Re: variable problem: OpenSSL 0.9.4 09 Aug 1999

1999-09-17 Thread Michael Slass
Didn't finish my thought: Is it possible that you've accidentally included a trailing slash in the path when configuring, like: $ ./config --prefix=/var/ssl/ --openssldir=/var/ssl/openssl/ Try without the trailing slash, and then recompile. Good luck. -Mike "Matthew R. Ocasek" wrote: > I

Re: variable problem: OpenSSL 0.9.4 09 Aug 1999

1999-09-17 Thread Dr Stephen Henson
> Matthew R. Ocasek wrote: > > I know this is a dumb question, but when trying to create a test > certificate using: > > openssl req > > I get the following error: > > Using configuration from /var/ssl//etc/openssl.cnf > Unable to load config info > > Where can I change that path? I have trie

Re: What US companies need to know about RSA

1999-09-17 Thread Dr Stephen Henson
I'll just add a few more bits of info to this... Aaron D. Turner wrote: > > This RSA library license that you recieve with Stronghold, etc, can > not be legally transfered to another piece of software, because the > license requires you to use the RSA approved implimentation of the RSA > algorit

Re: U.S. To Allow Export Of Encryption Products

1999-09-17 Thread Leland V. Lammert
At 02:29 AM 9/17/99 , Mark J Cox wrote: > > I read that as saying every program using strong encryption must > > still go through the approval process > >Right; it doesn't help us allow US people to get involved in the >development. It also means that browser manufacturers won't be able to >m

Re: variable problem: OpenSSL 0.9.4 09 Aug 1999

1999-09-17 Thread Michael Slass
Hey, 1) It looks like you have an extra slash in your path between ssl and etc. 2) A really sleazy fix would be to put a sym link in the directory where it's looking that points to your actual openssl.cnf -Mike "Matthew R. Ocasek" wrote: > I know this is a dumb question, but when trying to cr

What US companies need to know about RSA

1999-09-17 Thread Aaron D. Turner
After a lot of research and talking with people from the Stunnel and OpenSSL lists, and 3 phone calls to RSA itself, I've learned far more than I ever wanted to know about RSA's patent and licensing. [Contrary to the last person who posted on this list, I found both Stunnel and OpenSSL lists ver