RE: I'm still so very confused about certificates

2000-08-27 Thread Wirta, Ville
Hmmm I'm not sure if I understand You correctly. Do you really mean that Verisign wound be talking about RSA key lengths? That those keys were 40 or 128 bit long? That cannot be since RSA is a public key algorithm and usually nowadays at least 1024 bits long. My humble question is still in the

RE: I'm still so very confused about certificates

2000-08-27 Thread Yuriy Stul
Hi, We have two keys: RSA key for certificate and key for data encryption. When you read Verisign's pages you read about RSA key length (certificate). It is possible to use any combinations of key lengths for RSA and symmetric algorithm, e.g. 40 bit certificate and RC4-MD5 (128 bit) data encrypt

RE: I'm still so very confused about certificates

2000-08-27 Thread Wirta, Ville
-Original Message- From: Eric Murray [mailto:[EMAIL PROTECTED]] Sent: Friday, August 25, 2000 10:04 PM To: [EMAIL PROTECTED] Subject: Re: I'm still so very confused about certificates >The certificate has no effect on the type of symmetric encryption that SSL >negotiates. Funny

Function to export a cert?

2000-08-27 Thread Michael Lee
Is there any function in the OpenSSL library that I can use to export a certificate? What I want to do is to use a client program to connect to a server, then export the server's certificate to a text file in the PEM format. What should I do after calling SSL_get_peer_certificate()? Regards, M

Re: How can I change "libssl.a" into "libssl.so"?

2000-08-27 Thread Eric Murray
On Sun, Aug 27, 2000 at 03:30:29PM +0800, Howard wrote: > ÄãºÃ£¡ > > I find "libssl.a" and "libcrypto.a" in the path "/usr/local/ssl/lib/". > > I cannot find "libssl.so" ,there is only "libcrypto.so" in "/usr/lib/"? > > Oh... what shall I do? Draw a pentagram on the floor, stand in the middle

Re: SSLv2/SSLv3

2000-08-27 Thread Eric Murray
On Sun, Aug 27, 2000 at 12:15:47AM -0400, Serge Paquin wrote: > > Hello. How could I go about writing a web client that tries and SSLv3 > connection and if it failes fall back onto SSLv2? With OpenSSL, you don't have to do it, the underlying code will do it for you. It depends on the ciphers t

How to install OpenSSL in SunOS 2.6

2000-08-27 Thread siva kumaran
hi, I faced a problem when i was loading OpenSSL in SunOS 2.6.I have installed the OpenSSL in the system ,but the commands were not working.It is giving the error, "not seeded enough".I saw the FAQ and found that,if a patch file was installed, these can be solved,but even after installin