Re: Questions about Certificate Verification

2007-02-14 Thread Randall Hand
I fully understand your arguments about the "magic crypto fairy dust", and thankfully I won't be the sole person dealing with this if we decide to actually implement it. One of the advantages of working for the DOD is there are plenty of security people to go around :) Right now I'm just trying

Re: Questions about Certificate Verification

2007-02-14 Thread Patrick Patterson
On Wednesday 14 February 2007 09:37:07 you wrote: > I do need authentication, probably on both sides. Our problem is that the > Server & Client are both started by the user, and only for 1-connection. > There's a risk that once they start the server, tho, someone else could > "usurp" their connect

Re: Questions about Certificate Verification

2007-02-14 Thread Randall Hand
I do need authentication, probably on both sides. Our problem is that the Server & Client are both started by the user, and only for 1-connection. There's a risk that once they start the server, tho, someone else could "usurp" their connection as their is no validation or security. Also, all inf

Re: Questions about Certificate Verification

2007-02-13 Thread Bernhard Froehlich
Randall Hand schrieb: WEll, I understand the SSH way as I use it regularly, but I'm having a hard time finding documentation and examples on the SSL way to do this. Do you have any code examples, or know where I might find some? I managed to figure out how to do DH matching, which gives me encr

Re: Questions about Certificate Verification

2007-02-13 Thread Randall Hand
WEll, I understand the SSH way as I use it regularly, but I'm having a hard time finding documentation and examples on the SSL way to do this. Do you have any code examples, or know where I might find some? I managed to figure out how to do DH matching, which gives me encryption but no authentic

Re: Questions about Certificate Verification

2007-02-13 Thread Marek Marcola
Hello, > But one thing I don't understand is why both the RSA Private Key & > Certificate must exist on both ends of the connection. I'm used to > using RSA & DSA keypairs in SSH, and had assumed something similar > would work here. I *thought* that the Private Key would exist on the > Server, wh

Questions about Certificate Verification

2007-02-13 Thread Randall Hand
I'm somewhat new to OpenSSL (and SSL in general) and I'm attempting to use it to encrypt an existing socket communication system in an application we use. After a morning of experimenting, I've successfully written a small experimental Server & Client app that simply sends a "Hello World" across