Re: SSL for sendmail

1999-10-19 Thread Pinca George
Sometimes american humor is good !!   Anyway SSL is a point-to-point protocol and there are not many mail servers supporting SSL out there. So , with SSL your messages will be encrypted just till the first server. That's why SSL is not the best choice to send encrypted mail. If someone needs

Re: 128 Bit

1999-10-19 Thread Holger Reif
> Baris Sahin schrieb: > > > hi > i am using the latest versions of openssl and apache-ssl. > It uses EXP-RC4-MD5 for creating a certificate (i think, default). How The ciphersuite you mention is for sure not used to generate a cert. Mor probably you mean th cert you are using gives you only ex

Re: s_client and s_server's cert?

1999-10-19 Thread Holger Reif
jackie schrieb: > > When I tried the s_client and s_server, I couldn't find the CAfile which > is expected to authenticate the server.pem and client.pem,and the > doc\ssleay.txt is talking about some files > that doesn't exist. > So I have to create everything (ca cert,server cert,client cert) o

Difference between netscape and openssl PKCS12 file

1999-10-19 Thread Lee Chuk Munn -Sun Service
Hi, I've got the following question; what is the difference between the PKCS12 cert generated by "openssl pkcs12 -export" and one exported by Netscape (4.7). I did the following: 1. Exported a .p12 cert using "openssl pkcs12 -export" 2. Import it into Netscape 3. Reexport the same cert. I not

s_client and s_server's cert?

1999-10-19 Thread jackie
When I tried the s_client and s_server, I couldn't find the CAfile which is expected to authenticate the server.pem and client.pem,and the doc\ssleay.txt is talking about some files that doesn't exist. So I have to create everything (ca cert,server cert,client cert) only to take a look into the s

Re: How to get client certificate from IIS4.0 From asp.

1999-10-19 Thread zheng xiangyang
- Original Message - From: Miguel Angel Fraga <[EMAIL PROTECTED]> To: OpenSSL Users <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Tuesday, October 19, 1999 9:26 PM Subject: Re: How to get client certificate from IIS4.0 From asp. Miguel, I used your code to get the Client Certificate,

Re: SSL Tunneling and Proxy Servers

1999-10-19 Thread [EMAIL PROTECTED]
Hi, Slightly off topic -- We use apache as a proxy server. All you need to do is turn on 443 in addition to the normal 80 socket in the server. Works fine for us and 5 proxy servers running apache. I recommend apache as a proxy *very* highly. Regards Bill Laakkonen im1.com On 19 Oct 99

128 Bit

1999-10-19 Thread Baris Sahin
  hi i am using the latest versions of openssl and apache-ssl. It uses EXP-RC4-MD5 for creating a certificate (i think, default). How can i create a certificate(128 bit) with RC4-MD5 chipher. Also, where can i find detailed documentation about OpenSSL? Thanks.   Baris Sahin[EMAIL PROTECTED]

Re: creating a dummy self signed cert

1999-10-19 Thread Meike Aulbach
At 16:29 18.10.99 -0700, John Castillo wrote: > probably a simple question... and one that has been asked on this list recently, read the mailinglist archive (there should be a link to it somewhere at www.openssl.org) > but I keep having to make dummy self signed certs because it keeps expiri

MORE: Please Help: Newbie trying to understand cacert

1999-10-19 Thread Trembicki-Guy, Ed
I was too hasty posting that last message. I thought I had started from scratch, but it looks like my cacert.pem was out of sync with my signed certs (I had created demoCA several times). I just rebuilt the whole thing and now s_client has no errors, but s_server still reports "SSL3 alert read:w

Re: SSL for sendmail

1999-10-19 Thread Steve Sampson
The federal pens are pretty nice.  With a 5 year sentence, it would be like a sabatical, and you could write a great book in that time.  They have computers in the library (SSL capable) :-) Think of the positives.  Right now people like Liddy are worth more after prison than before.  I