Re: sslified imap server

1999-12-02 Thread Robert Forsman
Pete Chown <[EMAIL PROTECTED]> ,in message <[EMAIL PROTECTED] kygate.co.uk>, wrote: > Kristian Köhntopp wrote: > > > Now, where do I find a free SSLified IMAP server, please? ;-) > > It depends if you want the old or new version of the protocol. The > old version has a different port

Re: sslified imap server

1999-12-02 Thread Pete Chown
Kristian Köhntopp wrote: > Now, where do I find a free SSLified IMAP server, please? ;-) It depends if you want the old or new version of the protocol. The old version has a different port number for secured IMAP; the new one doesn't. If you want the new version, you could have a look at SafeG

FW: Security Advisory: Buffer overflow in RSAREF2

1999-12-02 Thread Widow
This was posted to one of the other lists. Can the OpenSSL RSAREF interface code protect against this security hole in RSAREF, or does everyone really have to patch the RSAREF code itself? --- Begin included message --- -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - --

Re: RSA Security and Red Hat, Inc. Sign Licensing Agreement

1999-12-02 Thread EKR
Andrew Cooke <[EMAIL PROTECTED]> writes: > > 1. The server's generation of its ephemeral DH key. > > 2. The server's DSA signature. > > 3. The client's generation of its ephemeral DH key. [snip] > I've dug out the nearest I can get to what made me think random numbers > were critical for DH key ex

Re: RSA Security and Red Hat, Inc. Sign Licensing Agreement

1999-12-02 Thread Tom Weinstein
Nicolas Roumiantzeff wrote: > > Does anybody know why both IE and Netscape browser implement exclusively RSA > certificates? > My feeling is that Microsoft and Netscape both made a deal with RSA Security > to get a "low" price RSA license at the condition of not implementing DSA. As a matter of

Re: SSL/TLS Security (FW - Tom Weinstein)

1999-12-02 Thread Andrew Cooke
Vin McLellan wrote: > > Date: Mon, 29 Nov 1999 14:11:47 -0800 > From: Tom Weinstein <[EMAIL PROTECTED]> > Organization: Geocast Network Systems > Sender: [EMAIL PROTECTED] > > Jaroslav Pinkava wrote: > > > > Where can I get the last informations about present SSL security status? > > I seek mo

https redirect problem.

1999-12-02 Thread biyong
hi, I am using apache1.3.9+ openssl0.9.4 . everything seems working fine. only one thing. when I want to redirect frome one page to another in the same httpsd . it will try to find the page use http instead of https. so the redirect always fail. what's the problem? anyone got this kind of ex

Re: sslified imap server

1999-12-02 Thread Erwann ABALEA
On Thu, 2 Dec 1999, Kristian Köhntopp wrote: > > Thanks to Ethereal (http://www.freshmeat.net/appindex/1998/07/14/900471369.html) > I am now able to show all these precious passwords to management and can easily > convince them to use encrypted protocols. Now, where do I find a free SSLified > I

RE: sslified imap server

1999-12-02 Thread GOMEZ Henri
You could try to use jonama as a ssl relay www.multimania.com/jonama/ - Henri Gomez ___[_] EMAIL : [EMAIL PROTECTED] (. .) PGP KEY : 4912D659...oOOo..(_)..oOOo... PGP Fingerprint : 8CAD0D50356DA7E45C540B010FFE39E8

Intallation problems with openssl-0.9.4

1999-12-02 Thread Jan Sandorf
Hi, I have some weird problems with my installation of openssl I'm trying to install this on a SunOS 5.6 Generic_105181-07 sun4u sparc SUNW,Ultra-2 And I just can't get it to work. Is there anyone out there who has any idea of what this can be? Cheers, -Jan - gcc

SSL/TLS Security (FW - Tom Weinstein)

1999-12-02 Thread Vin McLellan
Date: Mon, 29 Nov 1999 14:11:47 -0800 From: Tom Weinstein <[EMAIL PROTECTED]> Organization: Geocast Network Systems Sender: [EMAIL PROTECTED] Jaroslav Pinkava wrote: > > Where can I get the last informations about present SSL security status? > I seek more detailed information than contented in

sslified imap server

1999-12-02 Thread Kristian Köhntopp
Thanks to Ethereal (http://www.freshmeat.net/appindex/1998/07/14/900471369.html) I am now able to show all these precious passwords to management and can easily convince them to use encrypted protocols. Now, where do I find a free SSLified IMAP server, please? ;-) Kristian -- Kristian Köhntopp

Introduction?

1999-12-02 Thread Jochen Pfaadt
Does anybody know a URL or book with an easy to follow introduction to establishing secured connections? (something like '... for dummies' or so) __ OpenSSL Project http://www.openssl.org User Suppo

Re: RSA Security and Red Hat, Inc. Sign Licensing Agreement

1999-12-02 Thread Andrew Cooke
EKR wrote: > Andrew Cooke <[EMAIL PROTECTED]> writes: > > EKR wrote: > > > Andrew Cooke <[EMAIL PROTECTED]> writes: > > > > Nicolas Roumiantzeff wrote: > > > > > Does anybody know why both IE and Netscape browser implement exclusively RSA > > > > > certificates? > > > > I have no idea, but one r

RE: Using certificates for client authentication

1999-12-02 Thread Philip Cornelius
Your server needs a certificate that has been signed by the same authority as that which signed your client certs. i.e. when authenticating a client the server sends a cert request, part of that request are the CA's certs that the server will accept. If that isn't very clear I'll elaborate. You

Re: OpenSSL 0.9.4 bug on HP-UX 11?

1999-12-02 Thread Bernd Nies
Ulf Möller wrote: > > > It compiled without errors and warnings but when > > testing it with "make test" the test aborts at the > > BN (big number) test. I installed it, hoping that > > it would work anyway. > > That error might also come from problems with bc, but in your case it > looks like t

Re: OpenSSL 0.9.4 bug on HP-UX 11?

1999-12-02 Thread Karsten Spang
Bernd Nies wrote: > I tried to compile OpenSSL 0.9.4 under HP-UX 11.00 > on a 64bit PA-RISC 2.0 architecture (R class server). > Compiler: gcc 2.95.2 > It compiled without errors and warnings but when > testing it with "make test" the test aborts at the > BN (big number) test. I installed it, hop

Buffer overflow in RSAREF2, Security Advisory (CORE SDI)

1999-12-02 Thread Vin McLellan
A report of a buffer overrun in RSAREF v.2 was posted to Bugtraq, 12/1/99, by Gerardo Richarte <[EMAIL PROTECTED]> Core SDI (Seguridad de la Informacion), of Buenos Aires, moderates the Spanish language version of BugTraq. Last year, Core SDI discovered a vulnerability in SSH (u

Re: ca/cert key gen?

1999-12-02 Thread dreamwvr
hi, would be interested as well so please let me know Skye when you do locate the info. a few years ago i pursued this to no end result.. if the raw equipment is hand i would be more than happy to assist.. Regards,