known_hosts with permissions greater than 0750

2004-12-29 Thread Nick Gray
I have a security requirement that all files in a users directory have permissions no greater than 0750. When ~/.ssh/known_hosts is created it is given 0644. Is there a reason for this? I can see why other would "need" access to this file at all. Nix __

Re: Question about CA.pl and -newca

2003-08-23 Thread Nick Gray
On Sat, 2003-08-23 at 15:25, Dr. Stephen Henson wrote: > On Sat, Aug 23, 2003, Nick Gray wrote: > > > Dr Henson, > > > > > > > Try deleting the demoCA tree and doing CA.pl -newca again. > > > > > > > That isn't it. I tried that firs

Re: Question about CA.pl and -newca

2003-08-23 Thread Nick Gray
Dr Henson, > Try deleting the demoCA tree and doing CA.pl -newca again. > That isn't it. I tried that first. I am assuming the demoCA that it looks for is in the current working directory. > Also check openssl.cnf is somewhere usable or OPENSSL_CONF points to it or the > req command will give

Question about CA.pl and -newca

2003-08-22 Thread Nick Gray
Prior to version 0.96 I didn't have a problem with OpenSSL at all. Today I built a new system and tried to use it with the following results. root:/usr/local/openssl# cd misc root:/usr/local/openssl/misc# ls CA.pl CA.sh c_hash c_info c_issuer c_name der_chop root:/usr/local/openssl/misc# ./C

Re: Overview of Certificate usage

2003-02-25 Thread Nick Gray
On Tue, 2003-02-25 at 12:32, Dr. Stephen Henson wrote: > On Tue, Feb 25, 2003, Nick Gray wrote: > > > On Tue, 2003-02-25 at 11:00, Dr. Stephen Henson wrote: > > > > You cant call ./Ca.pl -sign a second time. I "knows" about the > > certificate that was pre