Re: Another RSApkc Primer

1999-12-01 Thread EKR
Linda Mundy <[EMAIL PROTECTED]> writes: > What I need, is a script interface to communicate to a remote > secure server. What I'm unwilling to do, is to pay $30K > to get it -- the last price I was quoted from RSA. I'm not a > big guy, and I'm not selling software; I just need some very > straig

C++ builder compilation with ASM routine

1999-12-01 Thread jackie
I am using C++builder,I hope compile openssl with asm routines. Will the nasm work with c++ builder? __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PR

Re: change_chiper_spec

1999-12-01 Thread Yuriy Stul
Hello! - Original Message - From: Pinca George <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, December 01, 1999 17:06 Subject: change_chiper_spec > Hello world, > > I made a SSL client and ssl draft is not very clear about this : > > as I understand, the server can decide

Re: Problem with Win98 Installation

1999-12-01 Thread Jeffrey Altman
> > Hi, > > I had some problems installing OpenSSL on the Win98 platform. After > compiling successfully, ca.pl does not run correctly when we want to > create a new request using > > perl ca.pl -newreq > > the configuration file openssl.cnf cannot be located although it is in > the

Re: Good Algorithm

1999-12-01 Thread Vin McLellan
I wrote: >> As I recall, however, the TLSv.1 Internet-Draft mischeviously cited >> -- as its cannonical RC4 reference -- one of the several Apparently RC4 >> (ARC-4) clones. Rich Salz <[EMAIL PROTECTED]> noted: >I believe they did this with the advice/suggestion/concer

Problem with Win98 Installation

1999-12-01 Thread Wong Pei Yuen
Hi, I had some problems installing OpenSSL on the Win98 platform. After compiling successfully, ca.pl does not run correctly when we want to create a new request using perl ca.pl -newreq the configuration file openssl.cnf cannot be located although it is in the directory that the

Re: Another RSApkc Primer

1999-12-01 Thread Linda Mundy
Hi -- What I need, is a script interface to communicate to a remote secure server. What I'm unwilling to do, is to pay $30K to get it -- the last price I was quoted from RSA. I'm not a big guy, and I'm not selling software; I just need some very straightforward functionality. It's funny; I thi

Re: OpenSSL 0.9.4 bug on HP-UX 11?

1999-12-01 Thread Ulf Möller
> It compiled without errors and warnings but when > testing it with "make test" the test aborts at the > BN (big number) test. I installed it, hoping that > it would work anyway. That error might also come from problems with bc, but in your case it looks like the bignum math does go wrong. You m

Re: ca/cert key gen?

1999-12-01 Thread Leland V. Lammert
At 05:23 AM 12/1/99 , you wrote: >Skye Poier wrote: >[...] > > Also, what files do I need to generate for the server and client > > (certificates? CA? private/public keys?) for those ciphers and what > > are the steps for doing that? I think I can be my own CA, also neither > > the client nor the

apache-mod_ssl problems

1999-12-01 Thread Mario Fabiano
With the last version 2.3.9-1.3.9 compiled on a RedHat 6.1 box I have the following behaviour with SSL and running the following script: #!/bin/sh echo "Content-type: text/plain" echo set -- BASH=/bin/sh BASH_VERSIO

Re: ca/cert key gen?

1999-12-01 Thread Andrew Cooke
Skye Poier wrote: [...] > Also, what files do I need to generate for the server and client > (certificates? CA? private/public keys?) for those ciphers and what > are the steps for doing that? I think I can be my own CA, also neither > the client nor the server are checking certificates, we're

s_server option

1999-12-01 Thread adrien NONN
I try to test an ssl solution and I would like the server send me a certificate request, but I don't find the option of s_server to do it. Does anabody know how to do it? thanks ___ Do You Yahoo!? Achetez, vendez! À votre prix! Sur http://en

change_chiper_spec

1999-12-01 Thread Pinca George
Hello world, I made a SSL client and ssl draft is not very clear about this : as I understand, the server can decide a to change a cipher at any time, so it can send a change_chiper_spec message. then I have to send a client hello encrypted with current cipher and do a full hanshake again ? Is

OpenSSL 0.9.4 bug on HP-UX 11?

1999-12-01 Thread Bernd Nies
Hi, I tried to compile OpenSSL 0.9.4 under HP-UX 11.00 on a 64bit PA-RISC 2.0 architecture (R class server). Compiler: gcc 2.95.2 I configured and compiled it with these commands: ./Configure --prefix=/opt/openssl \ --openssldir=/opt/openssl \ -fPIC \

libwww and openssl?

1999-12-01 Thread Wagemans, P.C.C.
It seems that in the US there is some glue code available by Olga Antropova to use openssl for SSL transport with libwww. Is this or something similar also available outside the US? Thanks, Peter Wagemans __ OpenSSL Project

RE: RSA Security and Red Hat, Inc. Sign Licensing Agreement

1999-12-01 Thread Salz, Rich
>What does it take to make OpenSSL use a Chrysalis card? It took us a few weeks. :) But then, we don't use the PKCS#11 API directly, but instead go through our own C++ classes. US export regulations prevent me from offering any technical assistance on what would be an export-controlled product. :

Re: RSA Security and Red Hat, Inc. Sign Licensing Agreement

1999-12-01 Thread EKR
Andrew Cooke <[EMAIL PROTECTED]> writes: > EKR wrote: > > Andrew Cooke <[EMAIL PROTECTED]> writes: > > > Nicolas Roumiantzeff wrote: > > > > Does anybody know why both IE and Netscape browser implement exclusively RSA > > > > certificates? > > > I have no idea, but one reason might be the need fo

Re: Another RSApkc Primer

1999-12-01 Thread EKR
Linda Mundy <[EMAIL PROTECTED]> writes: > Has anyone else here seen this announcement from Spyrus: > > http://www.spyrus.com/content/pressroom/releases/1999/pr_ssl_pricing.html TLSGold would do the job for you but the API is different from OpenSSL so it would require a significant amount of integ

Using certificates for client authentication

1999-12-01 Thread Mariana Podesta
Hi! I am really new with the use of OpenSSL, so sorry if this is an obvious question. I have generated certificates using openssl, and I could install them without any problem in NS and in MSIE, but when I try to use them for client authentication they just won`t be shown in the listbox. Could som

Re: RSA Security and Red Hat, Inc. Sign Licensing Agreement

1999-12-01 Thread Karsten Spang
Rich Salz wrote: > There is another option: use additional technology that has the proper > licenses, such as hardware crypto devices.For example, we use OpenSSL > but do all the RSA operations on a Chrysalis card. What does it take to make OpenSSL use a Chrysalis card? P.S. Found it at http

Re: Another RSApkc Primer

1999-12-01 Thread Leland V. Lammert
At 11:00 PM 11/30/99 , you wrote: >Hi -- > >Terrell Larson wrote: > > > Here's another couple options: > > > > 1) www.thwaite.com > >I believe that's www.thawte.com -- their certificates cost about 1/2 >what Verisign charges. Linda, That was my first assumption, .. but I am unsure what Thawte (

SSL toolkits and licensing questions

1999-12-01 Thread Jonathan Merkel
My company is developing a commercial Win32 TCP/IP application that will be distributed internationally and we'd like to have it support SSL. What SSL development kits and licensing options are available out there? So far I know of RSA's BSAFE SSL-C, but I couldn't find any mention of its cost o

Re: How to get Net::SSLeay to work with client cert

1999-12-01 Thread Marko Asplund
On Tue, 30 Nov 1999, Reiner Buehl wrote: > I'd like to post some stuff to a https server from a perl script > using client cert secured SSL v3 connections. At the moment everything > works with server cert SSL v2 but I have no idea how to switch to > SSL v3. you can specify the prefered protocol