Re: Server Authentication

2008-06-20 Thread AlokBhatnagar
Hello Patrick, Thanks for the detailed information. Regards Alok Bhatnagar - Original Message - From: "Patrick Patterson" <[EMAIL PROTECTED]> To: Sent: Friday, June 20, 2008 7:26 PM Subject: Re: Server Authentication > Hi Alok; > > On June 20, 2008 09:02:

Re: Server Authentication

2008-06-20 Thread AlokBhatnagar
ine a specific certificate, the simple answer is that you usually can't. - Original Message ---- From: AlokBhatnagar <[EMAIL PROTECTED]> To: openssl-users@openssl.org Sent: Friday, June 20, 2008 4:02:15 PM Subject: Re: Server Authentication Thanks david, I know

Re: Server Authentication

2008-06-20 Thread AlokBhatnagar
Thanks david, I know that the domain name should be same as the common name in server certificate which is sent by the server to the client. As I know, The SSL client verifies the server's certificate against the CA certificate loaded in the client. Suppose i trust Verisign CA. So my client must

Re: Encryption/Decryption

2008-06-20 Thread AlokBhatnagar
with some other functionality. So you don't have to encrypt the message before you pass the buffer to SSL_write, or decrypt the data in the buffer you use with SSL_read. - Original Message - From: AlokBhatnagar To: openssl-users@openssl.org Sent: Friday, June 20, 2

Encryption/Decryption

2008-06-20 Thread AlokBhatnagar
Hi, Do SSL_Write() and SSL_Read() functions perform the encryption and decryption respectively or we need to do it before calling these functions? Regards Alok Bhatnagar Subscribe to MicroWorld's free security newsl

Server Authentication

2008-06-20 Thread AlokBhatnagar
Hi, I have created my test client and server application. For that i also created a Root CA Certificate and using that certificate i created client and server certificates. Using those certificates the handshaking has been done between the client and server and they are communicating properly.