Is it possible for us to increase the cipher-length?

2001-03-25 Thread Liu Wen
hi,there you know, USA contraints its exportation of security products. With SSL/TLS, we in China can only use 56 cipher-length in DES, 512 in public key algorithm. Now i am working on a project , i want to use TLS, while these are too short.. Is it possible for us to increase them alternatively?

RE: SmartCard Public Key

2001-03-25 Thread Reddie, Steven
>From other discussions on this list over the last few weeks it sounds like the modulus read from the smartcard can be byte reversed. If the 1024-bit modulus is 0x87..43 but your smartcard is giving it to you byte reversed then you could be trying to use the modulus 0x43.87 which would is

Re: (openssl-users) Weird Apache-SSL problem

2001-03-25 Thread Richard Levitte - VMS Whacker
From: PeakPeak Tech Support <[EMAIL PROTECTED]> support> I'm sure you are trying to help. However, I can't tell how. support> support> Are you saying that openssl-0.9.6 won't compile and run properly when support> I am trying to install Apache from source on a RedHat 7.0 system? If support>

Problem with self-signed certificate

2001-03-25 Thread Neil Aggarwal
Hello: I am having a problem with the self-signed certificate that I created using open ssl 0.9.6. \ Here is what I did: openssl genrsa -des3 -out server.key 1024 openssl req -new -key server.key -out server.csr openssl genrsa -des3 -out ca.key 1024 openssl req -new -x509 -days 365 -key ca.ke

free SCEP implementation

2001-03-25 Thread Dr Andreas F Muller
Hello everyone, thanks to OpenSSL, I was able to hack up something that looks like an implementation of the simple certificate enrollment pro- tocol SCEP. If you are interested in helping to debug the beast, please have a look at http://openscep.othello.ch. So far, I've been able to comp

Re: RSA Private Encrypt

2001-03-25 Thread Geoff Thorpe
Hey there, I know the original poster already has his code working, but well ... I had already begun this reply so I'll just press on anyway! This may be of use to others now (or in the future) if they're trying to implement custom RSA_METHODs and/or ENGINEs. On Sun, 25 Mar 2001, Dr S N Henson w

Re: (openssl-users) Weird Apache-SSL problem

2001-03-25 Thread PeakPeak Tech Support
From: Richard Levitte - VMS Whacker <[EMAIL PROTECTED]> >From: [EMAIL PROTECTED] > >support> I'm trying to get Apache-ssl 1.3.14 to build (from source) >and run dynamically >support> on RedHat 7.0. >support> >support> I built openssl-0.9.6 with: >support> >support> And get this when I check the

Re: RSA Private Encrypt

2001-03-25 Thread Dr S N Henson
"Kenneth R. Robinette" wrote: > > > One minor suggestion, it would appear to me that the app_data field > in the RSA_METHOD structure perhaps should be a void * instead > of a char *. If I understand everything correctly, I should be able to > place a pointer to a private structure in this fie

Re: RSA Private Encrypt

2001-03-25 Thread Kenneth R. Robinette
Date sent: Sun, 25 Mar 2001 14:04:58 +0100 From: Dr S N Henson <[EMAIL PROTECTED]> Organization: S N Henson To: [EMAIL PROTECTED] Subject:Re: RSA Private Encrypt Send reply to: [EMAIL PROTECTED] Dr. Henson Afte

Re: RSA Private Encrypt

2001-03-25 Thread Dr S N Henson
"Kenneth R. Robinette" wrote: > > > I was hoping that this was the case. Now if I set the > RSA_FLAG_EXT_PKEY flag, how do I specify the function that will > be called by OpenSSL to do the private encrypt? Is this available to > a client program? I tried following the logic but quite frankly

Re: (openssl-users) Weird Apache-SSL problem

2001-03-25 Thread Richard Levitte - VMS Whacker
From: [EMAIL PROTECTED] support> I'm trying to get Apache-ssl 1.3.14 to build (from source) and run dynamically support> on RedHat 7.0. support> support> I built openssl-0.9.6 with: support> support> And get this when I check the Apache config: support> support> ./config linux-elf --prefix=/