Re: Mapping Certs to local account names: is there a standard practice?

1999-11-07 Thread Franco Papacella
On Sun, 7 Nov 1999, Paul Khavkine wrote: > Maybe you should try kerberosV Is there a (practical!) way to use kerberosV with IE, Netscape, Outlook, Eudora and all the stuff which end-users use? __ OpenSSL Project

Re: Mapping Certs to local account names: is there a standard practice?

1999-11-07 Thread Paul Khavkine
Maybe you should try kerberosV On Sun, 07 Nov 1999, you wrote: > On Tue, 2 Nov 1999, Jeffrey Altman wrote: > > > (sorry about the null message.) > > > > I am looking for a summary of people's experiences with using client > > certs to authenticate end users to Unix services. > > > > How are

No Subject

1999-11-07 Thread Frank Johnson
Cascade Data Group specializes in Hosting Christian Faith Based Websites. Visit us Today! www.cascadedatagroup.net ><>><>><> __ OpenSSL Project http://www.openssl.org User Support Mailing

Re: Mapping Certs to local account names: is there a standard practice?

1999-11-07 Thread Jeffrey Altman
> I'm just mapping public keys (which you can extract from any certificate, > whoever signed it) to user-ids. This mapping is stored in a SQL database > contaning additional data, like what services the user can use, which urls > (s)he can access and the like. > > I'm using this aproach since mor

Re: Cert Mapping API? was Re: Mapping Certs to local account names: is there a standard pra

1999-11-07 Thread Franco Papacella
On Thu, 4 Nov 1999, Jeffrey Altman wrote: > So lets modify the question to be: > > Given that there is no mechanism for certificate to userid mapping > that is both universal and secure and satisfies the privacy concerns > of end users, does anyone have an opinion on what this API shoul

Re: Mapping Certs to local account names: is there a standard practice?

1999-11-07 Thread Franco Papacella
On Tue, 2 Nov 1999, Jeffrey Altman wrote: > (sorry about the null message.) > > I am looking for a summary of people's experiences with using client > certs to authenticate end users to Unix services. > > How are you mapping a client cert to a local Unix account name? > > Are you using a f

Announce: STARTTLS telnet/telnetd patch

1999-11-07 Thread Peter 'Luna' Runestig
Hi all, I'm working on a patch for the GNU inetutils-1.3.2 package, to make the included telnet client and telnetd server support the STARTTLS IETF draft: http://www.ietf.org/internet-drafts/draft-ietf-tn3270e-telnet-tls-03.txt It also has flexible support for client authentication by a custom

Re: OpenSSL & Windows98, does it work?

1999-11-07 Thread Dr Stephen Henson
Yuriy Stul wrote: > > Hello everybody! > > I use OpenSSL 0.9.3. Under Windows NT everything OK. Under Windows 98 (same for > 95) I have a problem even with OPENSSL.EXE application. For example I start > OPENSSL s_server. After I close I see message about system error: "Illegal > operation" and "

OpenSSL & Windows98, does it work?

1999-11-07 Thread Yuriy Stul
Hello everybody! I use OpenSSL 0.9.3. Under Windows NT everything OK. Under Windows 98 (same for 95) I have a problem even with OPENSSL.EXE application. For example I start OPENSSL s_server. After I close I see message about system error: "Illegal operation" and "OPENSSL caused an invalid page fa