Re: OpenSSL Security Advisory: PRNG weakness in versions up to 0.9.6a

2001-07-15 Thread Kris Kennaway
Is it just me, or is this advisory not linked to on the main webpage? Kris PGP signature

Re: SSH and SSL

2001-02-19 Thread Kris Kennaway
On Mon, Feb 19, 2001 at 10:02:39AM -0500, [EMAIL PROTECTED] wrote: > Hi everybody, > I am working on a VB Client for SSH. I read the RFC's and barely > understood anything. I talked to some people on deja and they said I have > to get openssl, compile it and use the DLLs. I've done that b

Re: Open VPN - Anybody interested / suggestions

2001-01-07 Thread Kris Kennaway
On Fri, Jan 05, 2001 at 11:51:03AM +0100, Peter Stamfest wrote: > So do you think it is a waste of time to start such a project? Frankly, yes. Just use the industry-standard IPSEC, don't try and reinvent the wheel yet again and possibly screw up the crypto like M$ did with PPTP. Kris PGP sign

Re: Authentication fun

2000-05-11 Thread Kris Kennaway
On Wed, 10 May 2000 [EMAIL PROTECTED] wrote: > Hullo! > Just started using OpenSSL on a RH6.2 box. I configured, made, installed > with the defaults, took the stock ssh.pam file and slapped it into > /etc/pam.d/ssh however I could not authenticate. I'm using a DSA host key This is not an OpenSS

Re: openssl-0.9.4

2000-01-30 Thread Kris Kennaway
On Wed, 26 Jan 2000, Vladimir Kotal wrote: > when compiling %subj% on FreeBSD-3.4, gcc-2.7.3, i realized, that > -DNO_OBJECTS in crypto/onjects/obj_dat.c is missing (else i've got errors > on undefined NUM_NUM and others). maybe badly generated from objects.h ? > > when i compilled manually with

Re: OpenSSL with Curl - Protecting Username and Passwords on commandlines?

2000-01-04 Thread Kris Kennaway
On Sun, 2 Jan 2000, Joe Oravetz wrote: > I've been using Curl enhanced with OpenSSL to gather sensitive > information, which requires ascii username and passwords on the command > line? I'd like to keep the login information secret. Are there ways to > use OpenSSL features to encrypt/filter the

Re: how to find out a SSL session's PID under UNIX?

1999-12-09 Thread Kris Kennaway
On Thu, 9 Dec 1999, alohaz wrote: > Since SSL session is stateful, there should be a process corresponding > to it. But how can I find out the PID? Won't it always be the PID of your httpd process? Statefulness of the protocol it talks doesn't have anything to do with it. Kris

Re: Using OpenSSL, pipsecd...

1999-11-09 Thread Kris Kennaway
On Tue, 9 Nov 1999, Brian Nelson wrote: > I have a couple questions about pipsecd and OpenSSL on FreeBSD... I > cannot find a pipsecd document or anything, so I am mailing you, hoping > to find answers. Why not mail the author? :-) Cthulhu for President! For when you're tired of choosing

Re: new entry

1999-10-26 Thread Kris Kennaway
On Tue, 26 Oct 1999, Roberto Micarelli wrote: > Hi, I'm very new to the list, excuse me in the case of redundand questions. > I started to study openssl API but I'm ignorant about certain issues related > to that, the meaning of words like certificate, etc... > Is there an overview tutorial on th