CPU Load?

2000-03-03 Thread Matthew Clark
Hi... If I make the application part (the majority) of our website only available via SSL, I am concerned that it will create a huge load on the CPUs (it's a dual PIII 500).. Am I worrying about nothing, or should I try to only secure pages that really need it (login, profiles etc) Regards, Mat

Re: Need info.

2000-03-03 Thread Bodo Moeller
> [...] when a non SSL client connects to an ssl server it gives an > error and exits, well this is not the expected behavieor. > it is expected to ignore non ssl client capabple not to drob dead. You mean the server software crashes? What server software? ___

Re: gettimeofday(), kstat in md_rand.c

2000-03-03 Thread Bodo Moeller
> Here's a patch for md_rand.c to use gettimeofday() instead of time(). > gettimeofday() returns returns the time in microseconds which is likely > more unpredictable than just seconds. It's enabled when > GETPID_IS_MEANINGLESS is defined. Maybe a new define > HAVE_GETTIMEOFDAY is needed instead

No Subject

2000-03-03 Thread cjs 2895
Howdy all, I've written myself a nice little web proxy which removes certain tags, references to banner sites, pesky javascript features, and so on from web pages that I download. I would like to extend it to do the same thing for secure web pages. Basicly I want to decrypt the SSL stream at the

Re: Problem found when upgrade to openssl-0.9.5

2000-03-03 Thread Bodo Moeller
Dennis Xu <[EMAIL PROTECTED]>: > When I upgrade my applications by using openssl-0.9.5 beta1 to > replace openssl-0.9.4, at running time I found: > "error:02001003:system library:fopen:BN lib" when function called > at: SSL_CTX_load_verify_locations(ssl, caPath, caFile); > > I compile and run bo

Re: s_client question

2000-03-03 Thread Bodo Moeller
Griff McClellan <[EMAIL PROTECTED]>: > I've got s_client running on Windows 98. I want to know what cipher and > message digest protocols it uses by default. It uses the DEFAULT ciphers :-) To find out what these are, run 'openssl ciphers DEFAULT' (actually DEFAULT may be omitted -- you probab

Re: Blocking during handshake

2000-03-03 Thread Bodo Moeller
Rick W. Porter <[EMAIL PROTECTED]>: > I'm trying to create a non-blocking server that will service > multiple connections at a time. [...] I registered a callback > function with my socket manager library that is called when there is > a read event (after the underlying non-blocking TCP connecti

Re: mutiple threads handling fron one context

2000-03-03 Thread Bodo Moeller
Venkatesha, Ashalatha <[EMAIL PROTECTED]>: > Some time for more than one client it does the correct data transfer. > But at some times when first thread closes, and the second thread is on the > verge of handshaking with SSL_accept, the second thread also closes off. [...] > LOG7[4266:11]: SSL c

Re: PKCS11???

2000-03-03 Thread Dr Stephen Henson
Steve Samorodin wrote: > > As far as I know Netscape 4.7 can import pkcs12 (.p12, .pfx) files. > What did you use to generate the pkcs12 file? > Well this is just a wild guess but maybe "openssl pkcs12"? :-) Steve. -- Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/ Personal Em

Re: PKCS11???

2000-03-03 Thread Steve Samorodin
As far as I know Netscape 4.7 can import pkcs12 (.p12, .pfx) files. What did you use to generate the pkcs12 file? Steven [EMAIL PROTECTED] wrote: > > I have the version Netscape 4.7 > My certificats are working with IE5 in format pfx > I have my certificat in format .p12 but N4.7 does not acc

libwww Web client?

2000-03-03 Thread Peden, George
I got it working last night - with some tinkering and secret sauce. First, I have to say that I have never touched openSSL or libWWW before last week, so I was kind of fumbling around in the dark. I assume you have the openSSL shim for libWWW? I used w3c-libwww-ssl-1.0.1. Once this is built, I

libwww Web client?

2000-03-03 Thread Paul Douglas
Hello, I'm trying to find out whether anyone has ported OpenSSL into the Libwww Web client (used by Amaya).. and if so where can I find it? Thanks, Paul __ OpenSSL Project http://www.openssl.org