RSA/DSA key bit strength

2009-08-12 Thread Sudarshan Soma
Hi Can anone please clarify this data with OPENSSL 0.9.8i: RSA uses key ranges from 768-2048 and can operate only in CBC mode DSA uses key length of 1024 and operates only in CBC Thanks and Regards, Sudarshan __ OpenSSL Project

Re: Howto create a certificate for multiple domains?

2009-08-12 Thread Crypto Sal
On 08/12/2009 09:50 AM, Goetz Babin-Ebell wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 deblarinteln schrieb: | Hi, | | well I have to create a certificate for our maindomian as well as for some | subdomains. | | The structure will look pretty much like this: | | mydomain.tld | mail.myd

Re: Howto create a certificate for multiple domains?

2009-08-12 Thread Goetz Babin-Ebell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Emerson Saito wrote: | Is needed one certificate for each domain or subdomain. | Uses like *.mydomain.tld is not recomended. ??? What do you want to say ? If you have one system that serves several addresses (like mydomain.tdl, mail.mydomain.tdl, ow

Re: Howto create a certificate for multiple domains?

2009-08-12 Thread Emerson Saito
Is needed one certificate for each domain or subdomain. Uses like *.mydomain.tld is not recomended. 2009/8/12 Goetz Babin-Ebell > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > deblarinteln schrieb: > | Hi, > | > | well I have to create a certificate for our maindomian as well as for > some

Re: Howto create a certificate for multiple domains?

2009-08-12 Thread Goetz Babin-Ebell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 deblarinteln schrieb: | Hi, | | well I have to create a certificate for our maindomian as well as for some | subdomains. | | The structure will look pretty much like this: | | mydomain.tld | mail.mydomain.tld | owa.mydomain.tld It is called subjectAl

Digest and signature optimization tips

2009-08-12 Thread Guiliani, Florent
Hi OpennSSL users, Is there any tips to speed up digest and signature process? I'm doing multiple digest and signatures in a loop. I'm already reusing the digest context but that's all. I've seen calls to malloc and free inside the loop originated from OpenSSL. I wonder if I can avoid them.

Re: Is Openssl vulnerable to Null-Prefix Attacks?

2009-08-12 Thread Serge Fonville
>> Recently there has been some discussion on the Internet regarding so >> called null-prefix attacks, see >> http://www.thoughtcrime.org/papers/null-prefix-attacks.pdf. Is openssl >> vulnerable to this attack?. > > The attack is not an attack against SSL/TLS, but against > implementation of HTTPS

Re: Howto create a certificate for multiple domains?

2009-08-12 Thread Serge Fonville
Hi, > > well I have to create a certificate for our maindomian as well as for some > subdomains. Use a wildcard domain for your CN Unless each domain had a separate IP You need to specify *.mydaomin.tld as the CN HTH Regards, Serge Fonville Has anyone of you an idea how to get that done, so t

Howto create a certificate for multiple domains?

2009-08-12 Thread deblarinteln
Hi, well I have to create a certificate for our maindomian as well as for some subdomains. The structure will look pretty much like this: mydomain.tld mail.mydomain.tld owa.mydomain.tld ... Has anyone of you an idea how to get that done, so that the cert can finally be imported/installed on t