Re: DES-only OpenSSL version: technical aspects

2008-08-20 Thread Ger Hobbelt
Fred, You're welcome. Best of luck with your Canadian government, er, friends. ;-) Ger BTW: nitpicking my own text there: it was restricted to 56 bits tops back then. Irrelevant though. On Tue, Aug 19, 2008 at 2:53 PM, Fred Picher <[EMAIL PROTECTED]> wrote: > --- On Fri, 8/15/08, Ger Hobbelt <

Re: DES-only OpenSSL version: technical aspects

2008-08-19 Thread Fred Picher
--- On Fri, 8/15/08, Ger Hobbelt <[EMAIL PROTECTED]> wrote: > Ahh... This brings back memories... I had to do the same > 'selective compilation' back before 2000 when the USA would > prohibit cipher export at 128 bit and beyond unless you had a > specific license. Ger, Many thanks for taking

Re: DES-only OpenSSL version: technical aspects

2008-08-18 Thread Ger Hobbelt
On Fri, Aug 15, 2008 at 5:11 PM, Fred Picher <[EMAIL PROTECTED]> wrote: [...] >> If this is not sufficient you may check out ssl/sslv3.c etc and >> actually remove the ciphers you don't want to support in your >> libssl from the registration tables. > > As a test, I've commented out every cipher de

Re: DES-only OpenSSL version: technical aspects

2008-08-15 Thread Lutz Jaenicke
Fred Picher wrote: > Hello, > > Thanks for your reply. > > >> If this is not sufficient you may check out ssl/sslv3.c etc and >> actually remove the ciphers you don't want to support in your >> libssl from the registration tables. >> > > As a test, I've commented out every cipher definiti

Re: DES-only OpenSSL version: technical aspects

2008-08-15 Thread Fred Picher
Hello, Thanks for your reply. > If this is not sufficient you may check out ssl/sslv3.c etc and > actually remove the ciphers you don't want to support in your > libssl from the registration tables. As a test, I've commented out every cipher definition in ssl/s3_lib.c, like this example: The

Re: DES-only OpenSSL version: technical aspects

2008-08-14 Thread Lutz Jaenicke
Fred Picher wrote: > Hello all, > > I'd like to get all of the ciphers that are tagged 'export' as > well as the 56-bit ones that are not. Eg.: > > (list somewhat shortened in width) > > EDH-RSA-DES-CBC-SHA SSLv3 Kx=DH Enc=DES(56) > EDH-DSS-DES-CBC-SHA SSLv3 Kx=DH Enc=DES(56)