Re: PKCS12 - Why Encrypted?

2011-04-26 Thread Jeffrey Walton
On Tue, Apr 26, 2011 at 5:49 AM, Michel (PAYBOX) wrote: > Hi, > I am no expert on the matter, but on my humble opinion, > I think you can rely on this book because most of its content is about > fundamental concepts, > not implementation details ( padding, message encoding, ... ) for which you > c

Re: slow https conenctions

2011-04-26 Thread Alan Buxey
Hi, > On 04/26/11 3:06 AM, Matthew Fletcher wrote: > > I've come to this list in search of help with slow https conenctions (via > > the subversion, apache and finally mod_ssl lits). > > > > There is a 15 second ish delay whenever a client connects using https, > > 15 seconds sounds to *me* like

Multithreaded server example of OpenSSL

2011-04-26 Thread derleader mail
Hi, I need a multithreaded OpenSSL server which can handle multiple clients. Is there full example of such a server? Regards Peter

Re: issue with p12 creation and network solutions EV SSL

2011-04-26 Thread James Chase
> > > I got the the correct certificate chain from my Windows 7 box. Microsoft > tends to update its trusted CA certificates store more quickly and regularly > than Mozilla or Linux distros: the latest update was last month on March > 23rd 2011. > It is sad that even Network Solutions guys are not

Re: issue with p12 creation and network solutions EV SSL

2011-04-26 Thread Mounir IDRASSI
Hi James, I got the the correct certificate chain from my Windows 7 box. Microsoft tends to update its trusted CA certificates store more quickly and regularly than Mozilla or Linux distros: the latest update was last month on March 23rd 2011. It is sad that even Network Solutions guys are not

Re: slow https conenctions

2011-04-26 Thread John R Pierce
On 04/26/11 3:06 AM, Matthew Fletcher wrote: I've come to this list in search of help with slow https conenctions (via the subversion, apache and finally mod_ssl lits). There is a 15 second ish delay whenever a client connects using https, 15 seconds sounds to *me* like a DNS related timeout.

Re: issue with p12 creation and network solutions EV SSL

2011-04-26 Thread James Chase
> > > You've got the wrong chain file. I understand that NetSol switched to a > new > EV Issuing CA a few months ago. Are you definitely using the chain file > that > they supplied with your latest site cert? > I am using the chain file that they suggest downloading which already has the interme

Re: issue with p12 creation and network solutions EV SSL

2011-04-26 Thread Rob Stradling
On Tuesday 26 Apr 2011 13:29:00 James Chase wrote: > Someone suggested it would be helpful to post the chain file and the site's > public certificate to the list. If it is helpful, here is the site cert > (and below that their supplied chain file) > > -BEGIN CERTIFICATE- > -END CERTIF

Re: issue with p12 creation and network solutions EV SSL

2011-04-26 Thread Mounir IDRASSI
Hi, Your SSL certificate has an Authority Key Identifier extension which has a value of "8a 35 e4 35 3a bc 11 a1 9e fb f5 4f 34 66 d5 4b ac 4c 62 68". This indicates that it has NOT been issued by the "Network Solutions EV Server CA" certificate that is present in the chain file you posted: t

Re: issue with p12 creation and network solutions EV SSL

2011-04-26 Thread James Chase
Someone suggested it would be helpful to post the chain file and the site's public certificate to the list. If it is helpful, here is the site cert (and below that their supplied chain file) -BEGIN CERTIFICATE- MIIF+TCCBOGgAwIBAgIRAOQNdqGKinmztM0sRh0SkkowDQYJKoZIhvcNAQEFBQAw WTELMAkGA1UEBh

RE: Combining MD5 and SHA-1 to reduce collision probability

2011-04-26 Thread Steffen DETTMER
Hi, thank you for clarification, Dave! * Dave Thompson Friday, April 22, 2011 12:34 AM: > > so among 2^n+1 different messages, at least two of them > > must have the > > same 2^n bit hash (actually half because of birthday "attack"). > > To be exact: for an n-bit or 2^n-value hash, with 2^n + 1

Re: issue with p12 creation and network solutions EV SSL

2011-04-26 Thread James Chase
Well my results are quite different, and I guess point to my p12 not being correctly created. Strangely, the p12 I am running this test on works in production and doesn't produce a warning (I re-created last years certificate as a new p12 using the same process I am trying with this years). I also

slow https conenctions

2011-04-26 Thread Matthew Fletcher
Hi, I've come to this list in search of help with slow https conenctions (via the subversion, apache and finally mod_ssl lits). There is a 15 second ish delay whenever a client connects using https, i've tracked this down in the logs to the snippet shown. -- snip -- [Thu Apr 21 11:21:49 2011]

Re: PKCS12 - Why Encrypted?

2011-04-26 Thread Michel (PAYBOX)
Hi, I am no expert on the matter, but on my humble opinion, I think you can rely on this book because most of its content is about fundamental concepts, not implementation details ( padding, message encoding, ... ) for which you can find updates on RSA Labs PKCS http://www.rsa.com/rsalabs/node.

Re: issue with p12 creation and network solutions EV SSL

2011-04-26 Thread Rob Stradling
On Monday 25 Apr 2011 20:07:03 James Chase wrote: > I simplified the issue a bit in order to try and understand what is going > on here and found that the SSL certificate that Network Solutions is > providing, along with the intermediate chain file cannot be verified by > newer installs of Firefox.