RE: Is a client program required?

2004-12-21 Thread David Schwartz
> Okay, > > basically iam try to develop a security feature for php. > i need to send a filename over public key encryption, which is SSL in this > case, NOT https If you want to send a file encrypted, why not use HTTPS? > so php's engine sends it over ssl, but what happens on the cli

RE: Is a client program required?

2004-12-21 Thread Colin
Okay, basically iam try to develop a security feature for php. i need to send a filename over public key encryption, which is SSL in this case, NOT https so php's engine sends it over ssl, but what happens on the client end? will it panic when a PK data is sent to it? or would a client program

RE: Is a client program required?

2004-12-21 Thread David Schwartz
> Hi, > > Lets say i get my application to send something, maby a file or data to a > clients machine over SSL as a PKI > > is there a client program required? Sounds like the client program your looking for is called a 'browser'. Internet Explorer, Mozilla, and Firefox are pretty popul

Is a client program required?

2004-12-21 Thread Colin
Hi, Lets say i get my application to send something, maby a file or data to a clients machine over SSL as a PKI is there a client program required? __ OpenSSL Project http://www.openssl.org Use

Re: CRL Distribution Point

2004-12-21 Thread Lincoln
Peter, Thanks for sharing. However, I disagree on a few points. OpenSSL does have some CRL handling capability. Please refer to O'REILLY OpenSSL book as well as x509_verify_cert() source code. Lincoln --- Peter Sylvester <[EMAIL PROTECTED]> wrote: > > > > I am not sure Apache actually has th

Re: CRL Distribution Point

2004-12-21 Thread Peter Sylvester
> > I am not sure Apache actually has this capability at > all. Local CRLs are used in OpenSSL's > x509_verify_cert() function, and since it doesn't > involve network download, it is handled by OpenSSL. There is no functionality of CRL in mod_ssl or openssl. OpenSSL allows to extract programmati

question about openssl_open

2004-12-21 Thread Stanislav Chachkov
Hello, I cannot figure out which is the 'command line' equivalent of openssl_open php function I store raw sealed data and envlope key in two files (cc.cry and ekey.cry) , then i try that: $ openssl rsautl -decrypt -inkey rsaprivatekey.pem -in ekey.cry -out ekey $ openssl enc -rc4 -d -nosalt -in

Re: CRL Distribution Point

2004-12-21 Thread Lincoln
I am not sure if Apache does that. Local CRLs are handled differently since they are fed into OpenSSL x509_verify_cert function. Fetching and downloading CRL from CDPs for every transaction is too costly for most applications. CDP extension may, at the option of the CA, be either critical or non

Re: CRL Distribution Point

2004-12-21 Thread Lincoln
I am not sure Apache actually has this capability at all. Local CRLs are used in OpenSSL's x509_verify_cert() function, and since it doesn't involve network download, it is handled by OpenSSL. CDP extension may, at the option of the CA, be either critical or non-critical. However, the Internet Ce