Re: Compiling OpenSSL without 3DES

1999-11-12 Thread Ben Laurie
Bruno Treguier wrote: > > Ben: > > Is that true keylength or effective keylength? 3DES has an effective > > keylength of 112 bits. > > Well, first of all I have to present my apologies to the list for my > double posting the other day. Seems that I slipped on the "send" key > before finalizing m

Re: Compiling OpenSSL without 3DES

1999-11-12 Thread Nicolas Roumiantzeff
> 3DES has an effective keylength of 112 bits. I don't think so: A typicall Tripple DES has an effective key length of 112 bits as it uses two different 56-bit keys A and B: TrippleDesEncrypt (A, B, X) = DesEncrypt (A, DesDecrypt (B, DesEncrypt (A, X))) But the SSL implementation is slightly di

Re: How to create PKCS8 key format

1999-11-12 Thread Jan Leßner
Steve > Well I wrote the PKCS#8 code so I might be able to help :-) > > To change this you need to use the -topk8 option which reverses things > so it reads a traditional format private key and converts to PKCS#8. Oh yes, indeed, it works!! Sometimes things are just too easy to understand. :-) T

Re: Making New Certificates?

1999-11-12 Thread Jan Leßner
> Hi, > Can someone guide me in the right direction on how to get a > certificate up and running? The man pages dont exactly provide much > explanation. I have done this in the past with ssleay, this was sometime > ago though. > > Thanks Can't remember if .au domain means Australia or Austria.

Re: Compiling OpenSSL without 3DES

1999-11-12 Thread Bruno Treguier
Ben: > Is that true keylength or effective keylength? 3DES has an effective > keylength of 112 bits. Well, first of all I have to present my apologies to the list for my double posting the other day. Seems that I slipped on the "send" key before finalizing my message... Now, about the effective

Questions about OpenSSL and SUN Java Web Server

1999-11-12 Thread YekSoon Lok
Hi all, I'm new and have a few questions to ask. 1. Is it possible to link OpenSSL and SUN Java Web Server together ? 2. Does OpenSSL generate keys or certificates like what VeriSign provides ? The reason why I ask is that, to my knowledge, if I want secure HTTP on my site, normally I would r