Why and when does renegotiation take place?

2000-08-17 Thread Amit Chopra
Besides the questions in the subject, a few more. Who initiates the renegotiation? What happens to normal messages already in transit? Does OpenSSL servers have the capability of sending 'Hello request'? Can a client send consecutive client hellos? Will these be considered as renegotiations? My

Re: Life after September 20th

2000-08-17 Thread Vin McLellan
At 8/17/00, you wrote: > > What sideline patents? I have followed this issue and I do not know what > > patents you're referring to. > >The company I used to work for did research on this issue and talked to a >number of IP attorneys regarding this issue. They didn't seem to feel >that it was as

Re: Life after September 20th

2000-08-17 Thread Richard Levitte - VMS Whacker
From: Chris Zimman <[EMAIL PROTECTED]> chris> > Uhmmm? You're not thinking of the MultiPrime thingy, are you? chris> chris> Nope, those are Compaq's patents as far as I know. And a cooperation with RSA Security, let's not forget that... RSA Security will benifit from it one way or another. -

Re: BIO_flush() vs BIO_reset()

2000-08-17 Thread Richard Levitte - VMS Whacker
From: Angus Lee <[EMAIL PROTECTED]> anguslee> It looks like that the effect of BIO_flush() and BIO_reset() anguslee> are alike. Indeed is there any differences between them? Yup. BIO_flush() just flushes the buffers. BIO_reset() goes to the start of the file. Of course, if "the file" is actua

Re: Life after September 20th

2000-08-17 Thread Chris Zimman
> Uhmmm? You're not thinking of the MultiPrime thingy, are you? Nope, those are Compaq's patents as far as I know. --Chris __ OpenSSL Project http://www.openssl.org User Support Mailing List

Re: Life after September 20th

2000-08-17 Thread Chris Zimman
> What sideline patents? I have followed this issue and I do not know what > patents you're referring to. The company I used to work for did research on this issue and talked to a number of IP attorneys regarding this issue. They didn't seem to feel that it was as cut and dry of an issue. They

Re: Life after September 20th

2000-08-17 Thread Michael Sierchio
Chris Zimman wrote: > > This is a question for the lawyers. That said, there is a sentiment that > there exist sideline patents that may protect RSA beyond the expiration of > this patent. The *only* algorithm this applies to is the RSA public key > algorithm. None of the other algorithms (RC4

BIO_flush() vs BIO_reset()

2000-08-17 Thread Angus Lee
Hi, It looks like that the effect of BIO_flush() and BIO_reset() are alike. Indeed is there any differences between them? I want to know also if I can pick up the certificate that belongs to the CA which sign a particular certificate from a stack of certificates? I mean I have a certificate t

No Subject

2000-08-17 Thread Arne Borkowski (borko.net)
Gruss, Arne Borkowski Hamburg winmail.dat

Re: protecting private keys

2000-08-17 Thread Richard Levitte - VMS Whacker
From: paula <[EMAIL PROTECTED]> paula> I've been looking at the new code in BRANCH_ENGINE for adding paula> support for hw crypto cards. It looks like the code is pretty paula> straight forward for adding new cards. It doesn't look like paula> there is code there to protect the private keys (keep

Re: Release schedule

2000-08-17 Thread Richard Levitte - VMS Whacker
From: John Wang <[EMAIL PROTECTED]> jjw> Does anybody know when the "engine" variant will be rolled into release? Hopefully before next release. Otherwise, I intend to do an engine-specific release. jjw> And more generally when do we expect openSSL v1.0? We don't have a schedule for that. --

Problem implementing the SSL protocol

2000-08-17 Thread Yoni M.
Hello, I am currently implementing the SSL protocol in JAVA, and I encountered a strange problem, I hope you will be able to help me with. I am looking for a server that will be able to produce alerts and give me some indication about what I am doing wrong in a Client Authentication process.

protecting private keys

2000-08-17 Thread paula
I've been looking at the new code in BRANCH_ENGINE for adding support for hw crypto cards. It looks like the code is pretty straight forward for adding new cards. It doesn't look like there is code there to protect the private keys (keep them on the card). Can you tell me how the keys are being

Release schedule

2000-08-17 Thread John Wang
Hi, Does anybody know when the "engine" variant will be rolled into release? And more generally when do we expect openSSL v1.0? Thanks. John -- John Wang mailto:[EMAIL PROTECTED] MobileSys, Inc.http://www.mobilesys.com 301A East Evel

Re: Life after September 20th

2000-08-17 Thread Greg Stark
What sideline patents? I have followed this issue and I do not know what patents you're referring to. After the RSA patent has expired, the RSA algorithm is available royalty-free, it is that simple. So yes, it does mean that you can purchase and use any product offering 'the' RSA algorithm avail

Re: problem w/certificate request to Netscape CMS

2000-08-17 Thread Alan E. Derhaag
Dr S N Henson <[EMAIL PROTECTED]> writes: > > > > Still no success! The `openssl req -noout -text' output looks > > something like: > > > > ... > > RSA Public Key: (1024 bit) > > Modulus (1024 bit): > > 00:b8:66:e9:4f:ca:ba:4a:34:a8:2e:e4

Re: Life after September 20th

2000-08-17 Thread Allan Borr
> This is a question for the lawyers. That said, there is a sentiment that > there exist sideline patents that may protect RSA beyond the expiration of > this patent. I believe this to be untrue. If any such patents existed, they would be widely discussed in both the legal and cryptographic com

Re: Life after September 20th

2000-08-17 Thread Richard Levitte - VMS Whacker
From: Chris Zimman <[EMAIL PROTECTED]> chris> This is a question for the lawyers. That said, there is a chris> sentiment that there exist sideline patents that may protect chris> RSA beyond the expiration of this patent. Uhmmm? You're not thinking of the MultiPrime thingy, are you? -- Richar

Re: Life after September 20th

2000-08-17 Thread Richard Levitte - VMS Whacker
From: "Gotfried, Colette" <[EMAIL PROTECTED]> ColetteG> I am trying to analyze to understand the meaning of the ColetteG> expiration of the RSA patent. ColetteG> Does it mean that companies can purchase any product ColetteG> offering RSA algorithms implementation available in the ColetteG> market

Re: problem w/certificate request to Netscape CMS

2000-08-17 Thread Eric Murray
On Wed, Aug 16, 2000 at 05:10:57PM -0700, Alan E. Derhaag wrote: > Is there possibly a diagnostic tool, besides the req listing option to > openssl, that could indicate the validity of the certificate request? An asn.1-to-text printer and a copy of PKCS#10. Peter Gutman's "dumpasn1" is a good