Re: Certificate Authority

2000-05-23 Thread Mocha
At 03:14 PM 5/23/00 -0700, Steve Cook wrote: >At 01:43 PM 5/23/00 -0500, Mocha wrote: > > >i just feel that charging someone over $300/yr (verisign) is rediculous. > >with the acquisition of thawt by verisign, what does that leave us? > >Equifax Secure http://ww.equifaxsecure.com/ will issue you a

Re: Certificate Authority

2000-05-23 Thread Yuji Shinozaki
On Tue, 23 May 2000, Mocha wrote: > > who verifies that the CA is who they say they are? is there a governing > agency that over look all the CA's? > Ah. I think you have hit upon a question that should be asked more often. Since the root cert is self-signed, there is no inherent way to verif

Re: Certificate Authority

2000-05-23 Thread Leland V. Lammert
At 07:02 PM 5/23/00, you wrote: >I feel everyone is missing the point. > >What do I do as a company when I want to "acquire" 1,000's of user certs so >that my users can (e.g.) use IPSec VPN solutions over the Internet to >access corporate services? Simple answer, you don't. IPSec does not requir

Java version of RC5

2000-05-23 Thread Mark Redding
Hi, Does anybody know where I can get a Java implementation of RC5? Thanks, Mark Redding __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] A

Re: error set to X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY

2000-05-23 Thread Houman Ghaemi
sanjay reddy gogula wrote: > > Hi All, > > I am facing strange problems in authentication of server certificate. > > I have stored the certificate (the same one which I have installed on > the server) in a file ( certificate is PEM format) . I have loaded this > certificate using: > > if ((!S

Re: Wildcard Server Certs No longer accepted

2000-05-23 Thread hostmaster
Thanks for setting me straight on this. I suppose I lack due diligence wrt this subject. It is curious, the lack of predictibility MS have regarding not published policies, but real world uses. Why would minor release changes of the same product exhibit such a change? Cheers Bill Laakkon

Re: SSL_read, SSL_write

2000-05-23 Thread Steven M. Cherry
> Can anyone look at them and tell me what's wrong > with them? My SSL connections are working, but the reading is never able to > detect when a peer has closed the other end of the connection. > > > int sslsocket::getch(char& ch) > { > if(m_init) > init(); > > int ret = SSL_read(m_ssl,

Re: Wildcard Server Certs No longer accepted

2000-05-23 Thread Jenni Fair
Hi I am sorry you did not get a response directly from Thawte about this query. We have in fact received confirmation from Microsoft that a hotfix has been issued for this. This hotfix is currently available. Also a future service pack will correct this in Win2000. The word from Microsoft was

Re: Cryptoswift 100 ?

2000-05-23 Thread Arun Venkataraman
>Does 0.9.5 support the Cryptoswift line of SSL accelerators? Is anyone >using one under Solaris 2.6? AFAIK, it is upto rainbow technologies to provide a patch for OpenSSL 0.95. I believe a patch of 0.94 is available but I am not sure about 0.95. Arun. "The online world is a cool place to vis

Re: Certificate Authority

2000-05-23 Thread Jason Haar
I feel everyone is missing the point. What do I do as a company when I want to "acquire" 1,000's of user certs so that my users can (e.g.) use IPSec VPN solutions over the Internet to access corporate services? I don't _need_ a major CA to be guaranteeing the validity - I need to be the CA! Ot

expired certificate question

2000-05-23 Thread Rusty Wright
This is also sort of a behaviour question. If someone connects to a web server and that server's certificate has expired, should that person really be concerned since the information they're sending back to the server is still probably encrypted? In IE you can turn off the two options "check for

Re: Certificate Authority

2000-05-23 Thread Steve Cook
At 01:43 PM 5/23/00 -0500, Mocha wrote: >i just feel that charging someone over $300/yr (verisign) is rediculous. >with the acquisition of thawt by verisign, what does that leave us? Equifax Secure http://ww.equifaxsecure.com/ will issue you a server cert for $45, and their root cert is recogn

Re: Win32 web server using ssl

2000-05-23 Thread Arun Venkataraman
I did a project very similar to yours. Assuming you know how to handle blocking and non-blocking sockets using SSL (and reuse the SSL structure, if you want), initialization is a cinch. Refer to the cli.cpp and serv.cpp example written by sampo kellomaki in demos/ssl. You will find all the info yo

Re: Win32 web server using ssl

2000-05-23 Thread jcearley
What I found helpful so far in trying to use OpenSSL with VxWorks is the examples in SSL\openssl-0.9.5\demos\ssl. Specifically serv.cpp. This seems to be very bare bones and a good starting point. At least so far for me this has worked great. jennifer [openssl.org]:openssl-users@PSC 05/23

How to create server certificates?

2000-05-23 Thread Raaj Krissna
Thanks alot for the suggetions given by the experts through the openssl mail archive. Finally i established the communication link between the client and inetdserver.But i used the existing certificates that are given in the openssl. Now shall anybody suggest me : how to create my own server cert