Question regarding openssl program to compute the hashes and finger-prints.

2013-05-13 Thread Khadija Amin (khamin)
Hello All , I have a question regarding c_rehash utility used to create symbolic links to files named by the hash values. I understand that c_rehash calls openssl to compute the hash by invoking the following command : $OPENSSL x509 -hash -fingerprint -noout -in $file What I noticed, recent o

Re: Generating the same RSA PKI without using random seed

2013-05-13 Thread Jakob Bohm
On 5/12/2013 10:42 PM, MrUmunhum wrote: Hi group, I have a C program that does peer to peer functions. I am using RSA PKI to encrypt the packets. I need to be able to generate the same PKI keys on both machines. So I don't want to use a random seed. RSA_generate_key() calls random. Is there anot

Generating the same RSA PKI without using random seed

2013-05-13 Thread MrUmunhum
Hi group, I have a C program that does peer to peer functions. I am using RSA PKI to encrypt the packets. I need to be able to generate the same PKI keys on both machines. So I don't want to use a random seed. RSA_generate_key() calls random. Is there another API I can call that does not use rando

Similar issuer dn mod_ssl client authentication issue

2013-05-13 Thread Michele Mase'
I'm testing a client authentication using: SSLCACertificateFile /path/to/pemfile.pem SSLVerifyClient require SSLVerifyDepth 2 /LocationMatch> My env: CentOS 6.4, OpenSSL 1.0.0-fips 29 Mar 2010, Server version: Apache/2.4.3 (Unix) - Server built: Feb 7 2013 14:32:46 I have 2 C

Re: connection encrypted (a question)

2013-05-13 Thread Chris L
On May 12, 2013, at 6:38 PM, Salz, Rich wrote: > Many people find the four-letter word at the start of your domain name > offensive. > > I'm assuming you know English well enough to know that, and chose it > deliberately. > > That's reading beyond the cover. It broadcasts a general lack of r