RE: OpenSSL CA as trusted CA in Netscape browser - help

1999-12-20 Thread md5
The netscape plugin? Or the java plugin? If it's the netscape plugin do you have a url to it's api? -5 On Fri, 17 Dec 1999, Michael Pogrebisky wrote: > The method uses Netscape plug-in, so you can make your conclusions. > > -Original Message- > From: Andrew Cooke [mailto:[EM

RE: OpenSSL CA as trusted CA in Netscape browser - help

1999-12-20 Thread md5
Send a http link. That's what I do when i have 50 plus lines. ex. http://www.foo.com/~home/codesnippit.html -5 On Sat, 18 Dec 1999, Michael Pogrebisky wrote: > I just didn't want to bother all mailing list subscribers with a fairly > large piece of code, which is not directly related to the m

RE: Non-blocking I/O help

1999-12-20 Thread Li, Yunhong
SSL_connect and SSL_accept both work for non-block socket. SSL has an internal machine. So, multiple SSL_connect/SSL_accpet will advance the state machine. It will not restart SSL handshake. In fact, SSL_read will also jump to SSL_accept if the current connection is going to renegotiate. Cheers

Verisign buying Thawte

1999-12-20 Thread Salz, Rich
FYI. http://www.verisign.com/press/1999/corporate/1220_thawte.html <> VeriSign Press Release.url

Re: Diffie-Hellman support in OpenSSL

1999-12-20 Thread Dr Stephen Henson
Oliver King wrote: > > - cipher suites such as DH-RSA-DES-CBC-SHA and DH-DSS-DES-CBC-SHA are _not_ > supported; for these, the Diffie-Hellman parameters form part of the > server's certificate, and the whole lot has been signed by a CA (using RSA > or DSA), so the Diffie-Hellman parameters are fi

Re: Signature algorithms and digest compatibility

1999-12-20 Thread Dr Stephen Henson
Its a DSS restriction AFAIK. I've never seen it used with anything else and the standard specifically states you use SHA1. Steve. -- Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/ Personal Email: [EMAIL PROTECTED] Senior crypto engineer, Celo Communications: http://www.celocom.

Re: pk12 files

1999-12-20 Thread Dr Stephen Henson
thail wrote: > > I received the test certificate as a part of an email, and just cut and paste it to >a files and name it "server.crt". > So it's not binary, I tried > > openssl pkcs7 -inform DER -out certs.pem -in server.crt -print_certs > > this is the error : > > >unable to load PKCS7 o

Mail System Error - Returned Mail

1999-12-20 Thread Mail Administrator
This Message was undeliverable due to the following reason: The following destination addresses were unknown (please check the addresses and re-mail the message): SMTP <[EMAIL PROTECTED]> Please reply to [EMAIL PROTECTED] if you feel this message to be in error. Reporting-MTA: dns; mail.uws

Re: Diffie-Hellman support in OpenSSL

1999-12-20 Thread Jeffrey Altman
> Without some alternative mode of server authentication, of course, > Anon DH remains a pretty scary proposition -- all the more so because it > implies a level of trustworthiness that it can not provide. In the telnet protocol we would like to use Anon-DH in conjunction with RFC 1416 ba

Mail System Error - Returned Mail

1999-12-20 Thread Mail Administrator
This Message was undeliverable due to the following reason: The following destination addresses were unknown (please check the addresses and re-mail the message): SMTP <[EMAIL PROTECTED]> Please reply to [EMAIL PROTECTED] if you feel this message to be in error. Reporting-MTA: dns; mail.uws

Re: pk12 files

1999-12-20 Thread thail
I received the test certificate as a part of an email, and just cut and paste it to a files and name it "server.crt". So it's not binary, I tried openssl pkcs7 -inform DER -out certs.pem -in server.crt -print_certs this is the error : >unable to load PKCS7 object >62:error:0D091007:asn1 enc

Re: Non-blocking I/O help

1999-12-20 Thread Bodo Moeller
On Mon, Dec 20, 1999 at 01:18:04PM +0100, Nicolas Roumiantzeff wrote: > As SSL_connect and SSL_accept make several calls to the underlying socket > API, the SSL_ERROR_WANT_READ failure can happen in the middle of the > processing, not just on the first read, so calling it later wont work > becau

Mail System Error - Returned Mail

1999-12-20 Thread Mail Administrator
This Message was undeliverable due to the following reason: The following destination addresses were unknown (please check the addresses and re-mail the message): SMTP <[EMAIL PROTECTED]> Please reply to [EMAIL PROTECTED] if you feel this message to be in error. Reporting-MTA: dns; mail.uws

Signature algorithms and digest compatibility

1999-12-20 Thread Oliver King
Hi everyone, I notice that the OpenSSL only supports the DSA signature algorithm with SHA and SHA-1 message digests. Is this a limitation of OpenSSL or of the DSS Digital Signature Standard? Thanks in advance Ollie King Data Connection Ltd __

Mail System Error - Returned Mail

1999-12-20 Thread Mail Administrator
This Message was undeliverable due to the following reason: The following destination addresses were unknown (please check the addresses and re-mail the message): SMTP <[EMAIL PROTECTED]> Please reply to [EMAIL PROTECTED] if you feel this message to be in error. Reporting-MTA: dns; mail.uws

RE: Diffie-Hellman support in OpenSSL

1999-12-20 Thread Oliver King
Thanks everyone for your replies. In summary, my understanding from this thread and from reading the SSLv3 spec (stop me if I'm wrong!) is this: - cipher suites such as ADH-DES-CBC-SHA and ADH-RC4-MD5 are supported (but not recommended due to lack of authentication); to use them, I must compile w

Re: Non-blocking I/O help

1999-12-20 Thread Nicolas Roumiantzeff
For me, it works only for SSL_read and SSL_write. As SSL_connect and SSL_accept make several calls to the underlying socket API, the SSL_ERROR_WANT_READ failure can happen in the middle of the processing, not just on the first read, so calling it later wont work because it will restart from the

Hey, is the site down???

1999-12-20 Thread Steven T. Hatton
I can't seem to hit: http://www.openssl.org Is it down? It's 00:35 Monday the 20th. __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Auto

Re: Diffie-Hellman support in OpenSSL

1999-12-20 Thread Vin McLellan
Andrew Cooke <[EMAIL PROTECTED]>wrote: >> Although my post, in retrospect sounded like eay is some kind of font of >> eternal knowledge, I meant just that since he wrote the thing, he could >> explain the design decisions. >> >> Anyway, I've now found the following two posts which shed

Re: Diffie-Hellman support in OpenSSL

1999-12-20 Thread Bodo Moeller
On Mon, Dec 20, 1999 at 02:22:14AM -0500, Vin McLellan wrote: > Without some alternative mode of server authentication, of course, > Anon DH remains a pretty scary proposition -- all the more so because it > implies a level of trustworthiness that it can not provide. There is no reason f