RE: Need info.

2000-03-05 Thread Reddie, Steven
I think he means that when a non-SSL client connects to some SSL server that uses the OpenSSL code, the SSL version number check causes the connection to be dropped due to an incorrect version. I've seen this myself when some data made its way down the socket ahead of the SSL handshake. I think

Re: gettimeofday(), kstat in md_rand.c

2000-03-05 Thread Jeffrey Altman
> >> time() is a POSIX function while gettimeofday() is not. Also the > >> gettimeofday() resolution will not be *that* much better (in fact > >> it need not be better at all, time_t need not be an integral type). > > > It's not required to be better, but it is. > > ... if time_t is some intege

Perl scripts

2000-03-05 Thread Terje Tessem
Hi. Does anybody know of freely available Perl scripts, that can handle the entire process of applying for, approving and installing certificates over web interfaces (cgi-scripts) ? I assumes that the scripts are frontend to OpenSSL. Regards --Terje Tessem-- P.S. would appreciate a cc: to my em

Re: rsa encypt/decrypt

2000-03-05 Thread Sven Heiberg
Hi! > As a mentioned, the algoritm is the following > output = RSA( SHA-1 (input), d?, n). And now I'm in trouble. I guess RSA_sign is the thing you're looking for. There _is_ some documentation on the www.openssl.org and it should get you going. You could also look at http://www.cc.columbia.edu

Re: gettimeofday(), kstat in md_rand.c

2000-03-05 Thread Bodo Moeller
>> time() is a POSIX function while gettimeofday() is not. Also the >> gettimeofday() resolution will not be *that* much better (in fact >> it need not be better at all, time_t need not be an integral type). > It's not required to be better, but it is. ... if time_t is some integer type. Yes.

Re: Key generation error using OpemSSL 0.9.5

2000-03-05 Thread Bodo Moeller
Yang Dehua <[EMAIL PROTECTED]>: > i downloaded and compiled OpenSSL 0.9.5, then i > got the following error before i tried to upgrade > my Apache1.3.12 with mod_ssl 2.6.0: > "Failed to generate temporary 512 bits RSA private key" Use the latest mod_ssl release. __

RE: rsa encypt/decrypt

2000-03-05 Thread Elen Magioja
Just a little note to avoid confusion... > I'm working on a web page which will have direct link > to local major banks for transactions. Transactions > are secured wit rsa algoritm. More specifically I > must call a banks cgi link with various parameters > and one of them will be my digital sign

Re: rsa encypt/decrypt

2000-03-05 Thread Priit Pirita
Thank's for your kind answer. Gregory Stark wrote: > Seriously, first you should document your problem better! Ok, that I can do :-) Our bank's in Estonia have very good internet payment systems. Not so recently they introduced a system called I-Pizza, which works in the following way. I

Getting to know SSL better

2000-03-05 Thread Matthew Clark
I would love to get to know much more about SSL but am having trouble finding solid resources for this. Unfortunately I don't have even 50% of my time to commit to SSL at the mo and am probably going to have to get commercial solutions at 80 UK pounds a pop for client licenses...(we need hundreds

[ANNOUNCE] OpenSSL-0.9.5 MS Visual C++ Project files

2000-03-05 Thread Andrew W. Gray
OpenSSL-0.9.5 MS Visual C++ Project files Available If you're not using Windows NT, 95 or 2000 you can delete this now. For 0.9.5 - http://www.iconsinc.com/~agray/ossldev/ I only have VC6 for right now - will put out vc5 when i find my cd. Even though i write the project files by hand - I still

Re: Encryption Level

2000-03-05 Thread Philipp Buehler
Webmaster wrote To [EMAIL PROTECTED]: > Is there a setting somewhere that I need to change to get my server to do a higher >level of encryption? Here is what is currently being used: > > Export Grade (RC4-40 with 40-bit secret key) > > I am wanting to use 128 and/or 168 bit (Strong) encrypt

rsa encypt/decrypt

2000-03-05 Thread Priit Pirita
Hi, I'm working on a web page which will have direct link to local major banks for transactions. Transactions are secured wit rsa algoritm. More specifically I must call a banks cgi link with various parameters and one of them will be my digital signature calculated like this: signature = RSA(SHA

Key generation error using OpemSSL 0.9.5

2000-03-05 Thread Yang Dehua
Hi, i downloaded and compiled OpenSSL 0.9.5, then i got the following error before i tried to upgrade my Apache1.3.12 with mod_ssl 2.6.0: "Failed to generate temporary 512 bits RSA private key" I tried also to use OpenSSL 0.9.4, and there was no problem. Could anyone give me some tips? Thanks. Reg