Diffie-Hellman key exchange : Preventing MITM attack

2009-08-28 Thread Ram G
Hello Users, I would like to run a design by you. The requirement (and the constraint) is that I have to design a secure communication channel without using certificates. I'm trying out DH key exchange. My proposed design is a two step process for communication: 1) Use Anonymous DH and estiablis

Re: OpenSSL with Anonymous DH key exchange - sample program available ?

2009-08-28 Thread Ram G
Also include the following call to read the DH files (samples included in source like dh1024.pem) in function load_dh_params(). if ((bio=BIO_new_file(file,"r")) == NULL) printf("Couldn't open DH file\n"); On Fri, Aug 28, 2009 at 9:04 AM, Ram G wro

Re: OpenSSL with Anonymous DH key exchange - sample program available ?

2009-08-28 Thread Ram G
DH client/server program Regards Ramg On Fri, Aug 28, 2009 at 7:42 AM, Josue Andrade Gomes < josue.gomes.honey...@gmail.com> wrote: > I'm also interested in such sample program. Anyone? > > > > On Thu, Aug 27, 2009 at 4:39 PM, Ram G wrote: > >> Things are

Re: OpenSSL with Anonymous DH key exchange - sample program available ?

2009-08-27 Thread Ram G
srvr.c. So there is no need to call it in client applications. BRs Ramg On Thu, Aug 27, 2009 at 12:23 PM, Ram G wrote: > Hello, > > Going through various posts, I have come across references to Bodo > Moeller's example code showing SSL communication without certificates a

OpenSSL with Anonymous DH key exchange - sample program available ?

2009-08-27 Thread Ram G
Hello, Going through various posts, I have come across references to Bodo Moeller's example code showing SSL communication without certificates and using anonymous DH key exchange. If anybody has that sample, can you please forward it ? I have written a client and server taking help from the samp

Re: Ethereal does not show the SSL details

2009-08-26 Thread Ram G
With the right parameters, it will force the decoder to analyze the use of > this TCP port as a part of a SSL conversation. > > Regards, > JPV > > > Ram G a écrit : > > Installed Wireshark - still no luck. I have a simple ssl server on one > windows box and an ssl clie

Re: Ethereal does not show the SSL details

2009-08-26 Thread Ram G
or quite some time > now) by WireShark. > > Wireshark also has a lot more decoders written for it. (wireshark.org) > > If this doesn't help, please ask again -- but I'm pretty sure it will. > > -Kyle H > > On Wed, Aug 26, 2009 at 10:55 AM, Ram G wrote: &g

Ethereal does not show the SSL details

2009-08-26 Thread Ram G
Hi, I'm trying to use ethereal to observe the network communication between a test ssl server and a client (built from the demos/ssl samples). For some reason, the captured communication shows the protocol as TCP and there is no Secure Socket Layer in the Packet Details Window. Is there any other

Re: Anonymous DH client

2009-08-26 Thread Ram G
hared key in the server (Bob) and sending it to the client (Alice) - won't it be accessible to an attacker when it is sent in the clear ? Thanks Ramg On Tue, Aug 25, 2009 at 4:56 PM, Dr. Stephen Henson wrote: > On Tue, Aug 25, 2009, Ram G wrote: > > > Hi, > > > >

Anonymous DH client

2009-08-25 Thread Ram G
Hi, I'm trying to use openSSL without certificates and authentication through Anonymous Diffie-Hellman key exchange. I have managed to successfully exchange messages between server and client by modifying some of the sample programs available with the source code. The salient features of the modi