Re: session-ID cashe

2005-11-02 Thread imana sakki
hello I want to know that can I see the content of session-ID cash?(internal cash) is it possible for an attacker that sniff the master-key from this cash? how secure is this cash?     thank you very muchVictor Duchovni <[EMAIL PROTECTED]> wrote: On Sun, Oct 30, 2005 at 10:5

Re: base64 encode/decode

2005-11-02 Thread Nils Larsch
Patrick Guio wrote: ... I think there is a typo in the code snippet on the webpage http://www.openssl.org/docs/crypto/BIO_f_base64.html# The statement while((inlen = BIO_read(bio, inbuf, 512) > 0) should read while((inlen = BIO_read(bio, inbuf, 512)) > 0) I've committed a fix for the underlying

Re: Static RSA - What is it?

2005-11-02 Thread Dr. Stephen Henson
On Wed, Nov 02, 2005, Nadav Golombick wrote: > Hi, > > I am trying to use SSLdump to decrypt information I created using > OpenSSL. The limitation that the dump has is the it can only decrypt > streams where Static RSA was used. Anyone know what that is? > Those ciphersuites which use the publi

Re: client side certificates

2005-11-02 Thread Raymond Popowich
Hello, >> So can you confirm that entering "Tools->Internet >> Options->Content->Certificates" shows "Personal" certs, and that if you >> "View" them it states there's a private key associated with that cert? >> And then confirm that the CA that signed that cert is one trusted by >> Apache via SS

Static RSA - What is it?

2005-11-02 Thread Nadav Golombick
Hi, I am trying to use SSLdump to decrypt information I created using OpenSSL. The limitation that the dump has is the it can only decrypt streams where Static RSA was used. Anyone know what that is? -- Nadav Golombick __ OpenSSL