Re: openssl error while retreaving key from smartcard from wpa_supplicant?

2007-07-02 Thread Nils Larsch
Carles Fernandez i Julia wrote: ... That's the point : I have the private key certificate stored in the smartcard, not located in a plain file. That's why I commented the line above. the engine doesn't support using certificates stored on smart cards (and I don't even think that this extremly u

Server Application hangs

2007-07-02 Thread Rahul Malegaonkar (rmalegao)
Hi, In my server application, before I establish a connection with the client, I check whether an SSL object has been created (SSL_new()) and thus free it (SSL_free()). The reason to do this is to prevent memory leak (related to a different bug). However, my application hangs. Is this a correct a

RE: Self Signed Certificate: certificate chain verification failure

2007-07-02 Thread Lindsay Hausner
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Vishal V Sent: Monday, July 02, 2007 5:17 AM To: openssl-users@openssl.org Subject: Self Signed Certificate: certificate chain verification failure Importance: High Resending my mail with corrected informa

RE: use ssl for ssh transport layer (not proxy bypassing)

2007-07-02 Thread David Schwartz
> I'm not very experienced programming with SSL, but I'm heavily > researching the concepts at this stage, I'm a bit skeptical to > say the least of the cost/benefits of this. > > I sure would appreciate if someone could tell me if this is a bad > idea and why, the more I know now at this time the

RE: use ssl for ssh transport layer (not proxy bypassing)

2007-07-02 Thread Security Admin (NetSec)
"I sure would appreciate if someone could tell me if this is a bad idea and why, the more I know now at this time the better." Encryption adds latency to your traffic, double encryption just adds another delay. While this extra layer of security may be necessary for servers that have processin

Re: use ssl for ssh transport layer (not proxy bypassing)

2007-07-02 Thread Richard Levitte
In message <[EMAIL PROTECTED]> on Mon, 2 Jul 2007 07:42:22 -0700 (PDT), David Latil <[EMAIL PROTECTED]> said: davidl340> being SSH is an application level protocol, I don't see why davidl340> I could not replace the standard TCP connection that it davidl340> uses with SSL. Why you ask? the theor

Re: use ssl for ssh transport layer (not proxy bypassing)

2007-07-02 Thread Michael Sierchio
David Latil wrote: I have a somewhat bizarre project on my plate. I have been tasked to come up with a secure proxy of sorts that uses SSH over SSL (I mean to actually encrypt SSH with SSL, not just tunnel through a proxy). In the end, we would be using port forwarding over SSH for HTTP traf

Re: use ssl for ssh transport layer (not proxy bypassing)

2007-07-02 Thread Thomas J. Hruska
David Latil wrote: I have a somewhat bizarre project on my plate. I have been tasked to come up with a secure proxy of sorts that uses SSH over SSL (I mean to actually encrypt SSH with SSL, not just tunnel through a proxy). In the end, we would be using port forwarding over SSH for HTTP traffic.

use ssl for ssh transport layer (not proxy bypassing)

2007-07-02 Thread David Latil
I have a somewhat bizarre project on my plate. I have been tasked to come up with a secure proxy of sorts that uses SSH over SSL (I mean to actually encrypt SSH with SSL, not just tunnel through a proxy). In the end, we would be using port forwarding over SSH for HTTP traffic. being SSH is an

Self Signed Certificate: certificate chain verification failure

2007-07-02 Thread Vishal V
Resending my mail with corrected information Dear All, My client program fails to establish the secure connection (https) with web server due to certificate chain verification failure. And I think the error is due to a self signed certificate.

Self Signed Certificate: certificate chain verification failure

2007-07-02 Thread Vishal V
Dear All, My client problem fails to establish the secure connection (https) with web server due to certificate chain verification failure. And I think the error is due to a self signed certificate. ___