Re: Where to store client PEM certificates for an application

2008-12-28 Thread Victor Duchovni
On Mon, Dec 29, 2008 at 12:55:14AM -0500, Edward Diener wrote: > My assumptions from what I could glean from the certificates distributed > is that the CA-cert.pem is the same for client and server, while the > server-cert.pem is a public key corresponding to the private > client-key.pem, and t

Re: Where to store client PEM certificates for an application

2008-12-28 Thread Edward Diener
Ger Hobbelt wrote: On Fri, Dec 26, 2008 at 7:28 PM, Edward Diener wrote: I appreciate all the information you presented which I have snipped out in giving my response below. Money may be less of an issue than ease of use. This is a commercial application which however needs good security t

Re: Where to store client PEM certificates for an application

2008-12-28 Thread Michael S. Zick
On Sun December 28 2008, Ger Hobbelt wrote: > > And all that fuss, just because you've woken up and inquired about > security / protection technology, instead of ignoring the subject and > waiting for a nasty surprise down the road. Dang! ;-)) > You did well to ask, indeed. Even if the result m

Re: Where to store client PEM certificates for an application

2008-12-28 Thread Ger Hobbelt
On Fri, Dec 26, 2008 at 7:28 PM, Edward Diener wrote: > If I can get a little finicky, the application needs access to the > database/server. Nobody else should be accessing it. But I am sure that is > what you meant. > > The clients are to be trusted using the application. My employer, not I, > f

Re: Cipher Suites

2008-12-28 Thread Victor Duchovni
On Sat, Dec 27, 2008 at 08:42:19PM -0500, Hector Santos wrote: > I'm finally catching up and updating our OPENSSL *.dll distribution > with the latest build (0.9.8i). We had 0.9.8a (2006 time frame) > > The main reason is because we got inquiries regarding AES and SSL3 and > cipher suites. >

Mixed WIN32 Building Tools

2008-12-28 Thread Hector Santos
Folks, I can't help but notice that what happen to the PHP development team, the Google Chrome development team, is now happening with the OPENSSL development team. That is, with Microsoft pushing out a freebie compiler VS2005 (VC8) and now VS2008 (VC9), building developments that use to wo

Camellia Build Error

2008-12-28 Thread Hector Santos
Folks, I just got the 0.9.9dev SNAPSHOT (openssl-SNAP-20081227.tar.gz) and for a WIN32 build, I got the build error: perl crypto\camellia\asm\cmll-x86.pl win32n /MDd /Od -DDEBUG -D_DEBUG -DOPENSSL_THREADS -DDSO_W IN32 -W3 -WX -Gs0 -GF -Gy -nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_

Cipher Suites

2008-12-28 Thread Hector Santos
Hi, I'm finally catching up and updating our OPENSSL *.dll distribution with the latest build (0.9.8i). We had 0.9.8a (2006 time frame) The main reason is because we got inquiries regarding AES and SSL3 and cipher suites. I am trying to recall all our work, but I thought we had server sup