NEW OPENSSL MIRROR IN CZECH REPUBLIC

Hello, my name are Ivo MACHULDA, I¨m working in City-NET CZ, Ltd. we are create OPENSSL mirror in Czech Republic on this adress: ftp:/ftp.point.cz/pub/openssl/ Ivo MACHULDA jednatel společnosti City-NET CZ, s.r.o. Riegrova 857, 73802 Frýdek-Místek tel.: 0603917610, email:[EMAIL PROTECTED], www.i

Bug report with patch

Hi all, Problem: If the negotiated cipher is ADH (ie, the SSL_aNULL flag is set) and if the verify mode is SSL_VERIFY_PEER, the server will send a certificate request to the client. The receipt of this request by the client is considered a fatal protocol error in TLS. Therefore, the request sh

Windows NT Version

Hi, Is there a windows NT version of OpenSSL available? If so, where can I get it? Thanks Deva Get free email and a permanent address at http://www.amexmail.com/?A=1 __

Re: Diffie-Hellman support in OpenSSL

Andrew Cooke wrote: > > > Although my post, in retrospect sounded like eay is some kind of font of > eternal knowledge, I meant just that since he wrote the thing, he could > explain the design decisions. > > Anyway, I've now found the following two posts which shed light on the > historic basi

Re: OpenSSL CA as trusted CA in Netscape browser - help

I guess I could if I knew what a Netscape plug-in was (I use OpenSSL to communicate between components within our own software - I don't have much experience of browsers etc). Andrew Michael Pogrebisky wrote: > The method uses Netscape plug-in, so you can make your conclusions. > From: Andrew

Re: Diffie-Hellman support in OpenSSL

Andrew Cooke wrote: > Oliver King wrote: > [...] > > OK, silly me... I recompiled the library with SSL_ALLOW_ADH defined and the > > ADH ciphers worked fine. Thanks for the pointers though. It's a bit weird > > that the ADH ciphers still show up even when SSL_ALLOW_ADH is not defined... > [...] >

Re: OpenSSL compiling problem on OpenBSD

Michal Otoupalik wrote: > > Hi, > I have tried to compile OpenSSL 0.9.4 on OpenBSD and when compilation was in >directory crypto/comp > then it stopped with error: > +gcc -shared -o libcrypto.so.1 -Wl,-S,-soname=libcrypto.so.1 -Wl,--whole-archive >libcrypto.a > ld: No reference to __DYNAMIC >

Re: Non-blocking I/O help

Sean O'Dell <[EMAIL PROTECTED]> in ulf.openssl.users: >[...] SSL_connect, SSL_accept, SSL_read and SSL_write. Apparently, when the > underlying socket is in non-blocking mode, these functions can/may/tend to > behave in a non-blocking way also. What I'd like to know is, how can I tell > when th

RE: OpenSSL CA as trusted CA in Netscape browser - help

I just didn't want to bother all mailing list subscribers with a fairly large piece of code, which is not directly related to the mailing list topic. Regards, Michael. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Fri, 17 December, 1999 01:46 To:

RE: OpenSSL CA as trusted CA in Netscape browser - help

The situation in Netscape is really not worse than in MS IE, where everybody can write a piece of code (using standard well-documented Crypto API) doing exactly the same. For everybody too lazy to write his/her own code, you can just use "certmgr" utility coming with Platform SDK: certmgr

Re: Certificate Revocation

Mario Fabiano wrote: > Try to see the matter from a different point of view. Ok. > Suppose that your CA is a big organisation which is supported by a large > number of RA responsible to approve certificate requests from end users. > The approval is made only against a face to face identity proo