David Murphy <[EMAIL PROTECTED]>:
> 1. We have been told that we need a DSA (not RSA) certificate when
> [using] Diffie Hellman.
Not true. If you want to use Diffie-Hellman to avoid the patented RSA
algorithms, then obviously you cannot use RSA (leaving only DSA for
the certificates because DH
David Murphy wrote:
>
>
> Any ideas? this is on windows NT.
>
Ah one more thing. You won't be able to run CA.sh under NT. Try copying
CA.pl (in apps) somewhere on your path and doing:
perl -S CA.pl
wherever my original message said CA.sh
Steve.
--
Dr Stephen N. Henson. http://www.drh-con
David Murphy wrote:
>
> Steve - thanks a ton for this info.. However got a problem at 2 (generating
> DSA cert) . It says :-
>
> "using configuration from /usr/local/ssl/openssl.cnf" then
> "unable to load config info" even though I created the directory on Win NT
> and put the OpenSSL.cnf into
Steve - thanks a ton for this info.. However got a problem at 2 (generating
DSA cert) . It says :-
"using configuration from /usr/local/ssl/openssl.cnf" then
"unable to load config info" even though I created the directory on Win NT
and put the OpenSSL.cnf into it.
Anyway it generates and displ
> David Murphy wrote:
>
> Hi - We re trying to use the cipher suites :-
>
> SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA
> SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA
>
> and despite much time spent are getting absolutely nowhere trying to
> figure out how to setup so that that the OpenSSL server_c will accept
