RE: signed and certified but not for email

1999-09-23 Thread Samuel Liddicott
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Kaur Virunurm > Sent: Thursday, September 23, 1999 09:10 AM > To: [EMAIL PROTECTED] > Subject: Re: signed and certified but not for email > > Won't the certificate usage in IE also depend on the KEY

RE: signed and certified but not for email

1999-09-23 Thread Samuel Liddicott
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Dr Stephen Henson > Sent: Thursday, September 23, 1999 01:13 AM > To: [EMAIL PROTECTED] > Subject: Re: signed and certified but not for email > > > Samuel Liddicott wrote: > > But the problem is that

Re: What US companies need to know about RSA

1999-09-23 Thread David Lang
my question was really what options are available as part of #3 for things like stunnel, or a SSL capable version of lynx or wget (command line way to retreive a web page), or even just a SSL capable version of telnet. David Lang On Thu, 23 Sep 1999, Bodo Moeller wrote: > David Lang <[EMAIL PR

Re: signed and certified but not for email

1999-09-23 Thread Dr Stephen Henson
Paul Keogh wrote: > > > xenroll control has KeySpec property that you can specity > > before CreatePKCS10(): > > xenroll.KeySpec = 1 ' AT_KEYEXCHANGE > > xenroll.KeySpec = 2 ' AT_SIGNATURE > > > > Interesting. Anyone know the attribute syntax and OID used to

Re: What US companies need to know about RSA

1999-09-23 Thread Bodo Moeller
David Lang <[EMAIL PROTECTED]>: > This is getting slightly off-topic, but without risking it what options do > US companies have for items such as the SSLwrapper that was mentioned, or > other similar items. Option 1: Wait a year to let the patent expire. Option 2: Use only DSA-based ciphers ("

Re: how trustworthy is stunnel?

1999-09-23 Thread Bodo Moeller
On Thu, Sep 23, 1999 at 09:04:02PM +0200, Jan Meijer wrote: > We're planning on using stunnel in a production environment, but only if we > can somehow verify how trustworthy it is. We could perform a > source-code-review, but perhaps it's fully trusted by you all? Trustworthy in what sense? T

how trustworthy is stunnel?

1999-09-23 Thread Jan Meijer
Hi, We're planning on using stunnel in a production environment, but only if we can somehow verify how trustworthy it is. We could perform a source-code-review, but perhaps it's fully trusted by you all? Jan -- alive=true __ O

RE: Re: Net::SSLeay (1.05) and Windows NT

1999-09-23 Thread Ed Eddington
I have successfully installed Net::SSLeay on the picky NT machine now. Here is the last fix I had to make to get it to compile (in addition to the others posted previously for NT). nmake error: SSLeay.c(2508) : error C2440: '=' : cannot convert from 'const char *' to 'char *' Conversion

Re: What US companies need to know about RSA

1999-09-23 Thread David Lang
This is getting slightly off-topic, but without risking it what options do US companies have for items such as the SSLwrapper that was mentioned, or other similar items. David Lang On Wed, 22 Sep 1999, Terrell Larson wrote: > Aaron, > > In your situation I would not risk it either - I agree t

Re: SSL handshake error

1999-09-23 Thread Bodo Moeller
On Thu, Sep 23, 1999 at 03:17:32PM +0200, Goetz Babin-Ebell wrote: > In OpenSSL 0.9.3a I get the folowing handshake error: > (WindowsNT) > > > SSL_connct: 11 to Host before/connect initialization > SSL_connct: 11 to Host SSLv3 write client hello A > SSL_read : 11 to Host SSL3 alert fatal:hands

Re: Error 1 Message

1999-09-23 Thread Bodo Moeller
On Thu, Sep 23, 1999 at 05:01:38AM -0500, [EMAIL PROTECTED] wrote: > I am trying to install openssl-0.9.4 > and When I type ./config > I get the following message at the end. > ---start message > " Reconfigure the source tree (via './config' or 'perl Configure'), Please. >

Re: [OpenSSL] Re: Net::SSLeay, mod_perl and mod_ssl

1999-09-23 Thread Sampo Kellomaki
=?UTF-8?B?UmnEjWFyZGFzIMSMZXBhcw==?= <[EMAIL PROTECTED]> writes: > --ibTvN161/egqYuK8 > Content-Type: text/plain; charset=UTF-8 > Content-Transfer-Encoding: quoted-printable > > On Tue Sep 21 13:38:24 1999 + >(Antradienis, 1999 m. rugs=C4=97jo 21 d. 15:38:24 CEST), > Sampo Kell

Re: how to check an s/mime signature ?

1999-09-23 Thread Sampo Kellomaki
Aumont - Comite Reseaux des Universites <[EMAIL PROTECTED]> writes: > In order to introduce s/mime authentication in the mailling list > robot sympa (http://listes.cru.fr/sympa ), I'am looking for a library > to check s/mime signature. Although my tutorial currently only covers producing signatu

SSL handshake error

1999-09-23 Thread Goetz Babin-Ebell
Hallo, In OpenSSL 0.9.3a I get the folowing handshake error: (WindowsNT) SSL_connct: 11 to Host before/connect initialization SSL_connct: 11 to Host SSLv3 write client hello A SSL_read : 11 to Host SSL3 alert fatal:handshake failure 165:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert

RE: signed and certified but not for email

1999-09-23 Thread Paul Keogh
> xenroll control has KeySpec property that you can specity > before CreatePKCS10(): > xenroll.KeySpec = 1 ' AT_KEYEXCHANGE > xenroll.KeySpec = 2 ' AT_SIGNATURE > Interesting. Anyone know the attribute syntax and OID used to carry this information in the ge

Re: Common Lisp Interface to OpenSSL

1999-09-23 Thread Dan O'Reilly
At 03:48 PM 9/22/99 -0500, Matthew M. Copeland wrote: > >Does anyone know of a common lisp interface to the OpenSSL library? Yeah, there's "OpenEth-Eth-Ell"... sorry, couldn't resist... -- +---+---+ | Dan O'Reilly

Re: Is there a maximum size for SSL application data?

1999-09-23 Thread Anshuman Kanetkar
The SSL protocol definition itself sets the 16k limit... So u have to split the data. -Anshuman Kanetkar David Murphy wrote:   Hi - we are trying to send various lengths of application data to OpenSSL server from a Java client and find that lengths above ~16K cause :- SSL_Routines:SSL3_GET_REC

Error 1 Message

1999-09-23 Thread admin
I am trying to install openssl-0.9.4 and When I type ./config I get the following message at the end. ---start message " Reconfigure the source tree (via './config' or 'perl Configure'), Please. make: *** [Makefile.ssl] Error 1 ---end message

Re: openssl for WinCE

1999-09-23 Thread Lennart Bång
Hi, I ported OpenSSL to another RTOS "OSE" from Enea OSE Systems but do not have windows CE :( /Lennart xuyifeng wrote: > Hi, > > I need openssl support for WindowsCE, is there anyone working on this porting? > > Regards, > XuYifeng > > > ___

Re: signed and certified but not for email

1999-09-23 Thread Kaur Virunurm
> > But the problem is that certificates, CA-signed and installed are marked in > > IE5 as fit for everything EXCEPT email and client-identification. > > > > They are marked for servers, code signing, encryped file systems, all kinds > > of stuff I have never heard of! Won't the certificate usage