Fw: How to add Key usage attribute...

2001-02-04 Thread chandu
Hi all, I have a question regarding the adding of the Key usage attribute to the PKCS10 certificate request. I tried using the following code.. ikeyUsageAttr = X509v3_KU_DIGITAL_SIGNATURE; iRetVal = X509_REQ_add1_attr_by_NID(preq, NID_key_usage,V_ASN1_INTEGER, &(ikeyUsageAttr), 4); When

Brand New E-Mail pager for FR-EE! 7681

2001-02-04 Thread bigjoe
Accessmate E-Mail display pager. This is the top of the line PCS technology pager made today. This side viewable display pager has a retail value of $189.00and comes with its own e-mail address so you can receive your e-mails as well as alpha-numeric and numeric messages instantly wher

Message status - undeliverable

2001-02-04 Thread Mailer-Daemon
The message that you sent was undeliverable to the following: SHARSHAD Information about your message: Subject: Message status - undeliverable

Message status - undeliverable

2001-02-04 Thread Mailer-Daemon
The message that you sent was undeliverable to the following: SHARSHAD Information about your message: Subject: Message status - undeliverable

Message status - undeliverable

2001-02-04 Thread Mailer-Daemon
The message that you sent was undeliverable to the following: SHARSHAD Information about your message: Subject: Message status - undeliverable

Message status - undeliverable

2001-02-04 Thread Mailer-Daemon
The message that you sent was undeliverable to the following: SHARSHAD Information about your message: Subject: Re: SSL_shutdown() ?

Re: SSL_shutdown() ?

2001-02-04 Thread Lutz Jaenicke
On Sun, Feb 04, 2001 at 07:30:27PM +0100, Gil Peeters wrote: > > On Sun, Feb 04, 2001 at 06:12:39PM +0100, Gil Peeters wrote: > > > After calling SSL_shutdown() is it still nesc to close the underlying > > > socket associated with the SSL Connection? > > > > SSL_shutdown() will only send the close

Re: SSL_shutdown() ?

2001-02-04 Thread Gil Peeters
Lutz Jaenicke wrote: > On Sun, Feb 04, 2001 at 06:12:39PM +0100, Gil Peeters wrote: > > After calling SSL_shutdown() is it still nesc to close the underlying > > socket associated with the SSL Connection? > > SSL_shutdown() will only send the close-alert to the peer and switch the > setting of th

Re: SSL_shutdown() ?

2001-02-04 Thread Lutz Jaenicke
On Sun, Feb 04, 2001 at 06:12:39PM +0100, Gil Peeters wrote: > After calling SSL_shutdown() is it still nesc to close the underlying > socket associated with the SSL Connection? SSL_shutdown() will only send the close-alert to the peer and switch the setting of the SSL to "shutdown mode". It does

Re: Netscape accepts cert from evil empire - found it!!

2001-02-04 Thread terr
Micheal, thankyou. I did find it under "more info". This sure is not obvious mind you... thanx for the clarification. On Sun, Feb 04, 2001 at 06:08:20PM +0100, Michael Ströder wrote: > [EMAIL PROTECTED] wrote: > > > > I created a cert with the host name known as www.evilempire.com > > and ne

SSL_shutdown() ?

2001-02-04 Thread Gil Peeters
After calling SSL_shutdown() is it still nesc to close the underlying socket associated with the SSL Connection? Is it also nesc to free() the SSL stuct return from SSL_new() or is that done somewher in the shutdown? Thnaks in advance G. -- - Gil Peeter

Re: Netscape accepts cert from evil empire

2001-02-04 Thread Michael Ströder
[EMAIL PROTECTED] wrote: > > I created a cert with the host name known as www.evilempire.com > and netscape was quite happy to accept it and never reported that > the URL I typed in does not match the name carried within the cert. You're wrong. Even those old Netscape Navigator 4.0x certainly as

Netscape accepts cert from evil empire

2001-02-04 Thread terr
First off - I am new to this and I'm learning. I do not claim to know very much about it and asked the question in openssl-dev because it seemed to me that if the DNS is highjacked that the transaction can be masqueraded. I did a test with Netscape 4.07. This browser is not terribly old. I c

Re: Man in the middle attacks

2001-02-04 Thread Greg Stark
I am replying to -users even though the original post was sent to -dev. First, a nit on terminology. The protocols should be referred to as the SSL protocols or perhaps more accurately the SSL/TLS protocols, not the openssl protocol. OpenSSL is an implementation of these protocols. The attack yo

Re: sgc

2001-02-04 Thread Dr S N Henson
Itai Levy wrote: > > Dr Henson, > > Thanks for your reply. > > According to your answer I need to check the following ciphers: > DEFAULT:!EXPORT56 > DEFAULT:!MD5 > DEFAULT:!SHA1 > > The problem is that I minimized the IE 5.01's problematic ciphers to one: > RC4-MD5. The problem is not RC4-MD5

RE: sgc

2001-02-04 Thread Itai Levy
Dr Henson, Thanks for your reply. According to your answer I need to check the following ciphers: DEFAULT:!EXPORT56 DEFAULT:!MD5 DEFAULT:!SHA1 The problem is that I minimized the IE 5.01's problematic ciphers to one: RC4-MD5. So I use DEFAULT:!RC4-MD5 and still there are some browsers that need