Re: On-the-fly self generated certs for network application

2001-01-11 Thread Patrick G. Moore
Of course, be aware that a man-in-the-middle attack is possible. A man in the middle could impersonate the server at any time. Cheers Pat [EMAIL PROTECTED] wrote: > > Just use Anonymous Diffie-Hellman if you don't need certificates. All you need > to do is change the cipher set. > > G. > >

Re: Mail server invalidates my sig

2001-01-04 Thread Patrick G. Moore
Ok. It works when there is no attachment. But it still does not display the trailer on signed email unless I view the source. Sorry for the off-topic content. "Patrick G. Moore" wrote: > > I am running Netscape 4.7 something. When > I get the mail back from the list t

Mail server invalidates my sig

2001-01-04 Thread Patrick G. Moore
I am running Netscape 4.7 something. When I get the mail back from the list the sig is invalid. The Bcc was valid. I think the only difference is the trailer that was put on by the mail server. This should not matter but with netscape it does. I have not yet tried it with openssl smime. BTW:

Re: How do I create certificate requests from pubkey?

2001-01-04 Thread Patrick G. Moore
Hi, I had to use some legacy keys in my system. So I modified the request function with a new option to read the key from a file. For the private part of the key, I just put a bogus value. Of course the signature on the request was then invalid. I then modified the CA program with an option t

Re: Looking for 2 different plaintexts with same MD5 hash.

2000-08-31 Thread Patrick G. Moore
"BOB RADAR BOB" spelled both forward and backward. Sorry, couldn't resist. BTW. Thanks to all who replied to my LDAP integration question a few weeks ago. I found the mod_ssl patch using openLDAP was a good example. This list is an invaluable asset to all of us users of openSSL. Pat Lewis M

Challenge

1999-08-24 Thread Patrick G. Moore
Anyone want to try cracking this? It was probably encrypted by the issuer with the password supplied by the subscriber. NortonNg wrote: > > hello, > > Recently, i get a certificate and my private key from > a CA. The certificate file can be read by openssl, but > the private key file c

Re: BN_dup bug?

1999-07-30 Thread Patrick G. Moore
Salz, Rich wrote: > > > (a=b) && (a=BN_dup(b)); > > Oh gak, are we really trying to be clever for its > own sake? > > >But back to the original question. I think it's really > >Bug and should be handled by BN_dup() internally. > > I dunno. I prefer that functions coredump when given > N

Re: Archive / FAQ

1999-07-16 Thread Patrick G. Moore
Hi Holger: I kept getting a blank page there too. Finally, I tried to view the document source in netscape, there was all the text! I didn't bother to try to find any HTML mistake, but it must be the problem. HTH Pat Holger Reif wrote: > > I want to check www.openssl.org/support/ > I want to