Re: OpenSSL newbie

2007-02-16 Thread Tommy W
> Yes, 'epoll' is the most efficient mechanism on Linux. I recommend using > level-triggered events because it's simpler. That's the opposite as to what I have done. :) From what I have read I gathered that Event Triggered is MUCH faster. But I guess I could have gotten it all wrong. > More gener

RE: OpenSSL newbie

2007-02-14 Thread David Schwartz
> I'm quite aware that that high goal is quite hard to reach, but > still it's my > goal. Aim for the star and you'll reach the top of trees. That make sense. > Yeah, I have been reading up a lot on select and poll, etc. > It seems epoll is the way to go. Yes, 'epoll' is the most efficient mech

Re: OpenSSL newbie

2007-02-13 Thread Tommy W
> > I'm about to develop a server application which should be able to > > handle ALOT of connections, say 20k-30k > > Any suggestions as to how I should tackle this problem? > > It takes a lot of experience to develop a system that can handle more than > 10,000 simultaneous connections. I don't thi

RE: OpenSSL newbie

2007-02-13 Thread David Schwartz
> I'm about to develop a server application which should be able to > handle ALOT of connections, say 20k-30k > Any suggestions as to how I should tackle this problem? It takes a lot of experience to develop a system that can handle more than 10,000 simultaneous connections. I don't think it's re

Re: OpenSSL newbie Question [Regd: java class to read a PEM file]

2006-11-28 Thread Julius Davies
Hi, If I may attempt a slightly better response than my first one! Sorry to openssl-dev people about spamming your list with this. Probably this email is better suited to openssl-users, so I'm cross-posting it. (If anyone decides to reply, please reply to openssl-users!) 1. Dr Stephen N. Hen

RE: openssl newbie HELP!

2004-08-02 Thread Liam Escario
Thanks for all your help guys. Those links were great! I liked Areg's the best: very detailed and complete (and good for beginners). =) Just a question or two to clarify: 1) I noticed the certificates created in the tutorial had a *.pem extension. The ones I'm used to dealing with had a *.cer on

Re: openssl newbie HELP!

2004-08-02 Thread Oliver Welter
Hi Joseph, It's been awhile since I've looked at OpenCA. The manual was almost impossible to read and seemed to be quite a rough translation from German. Do you know if any work has been done on cleaning that up in the past 12 months or so? Yes, a lot - I am member of the dev team so I know wha

Re: openssl newbie HELP!

2004-08-02 Thread Joseph Bruni
It's been awhile since I've looked at OpenCA. The manual was almost impossible to read and seemed to be quite a rough translation from German. Do you know if any work has been done on cleaning that up in the past 12 months or so? On Aug 1, 2004, at 11:42 PM, Oliver Welter wrote: If you need rev

Re: openssl newbie HELP!

2004-08-02 Thread Michael Spivak
Try this one: http://www.dswilson.com/spring2004/javasecurity/openssl-instructions.html - Original Message - From: "Liam Escario" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, August 02, 2004 7:32 AM Subject: openssl newbie HELP! > Hi! > > Can anybody direct me to an Openss

Re: openssl newbie HELP!

2004-08-01 Thread Oliver Welter
Hi Liam, Liam Escario wrote: > Hi! > > Can anybody direct me to an Openssl tutorial/manual where I can find out > step-by-step how to: > > 1) use openssl to create a CA > 2) use the CA to create certificates > if you need only some certificates this is a good start http://www.code.online.pt/story/2

RE: openssl newbie HELP!

2004-08-01 Thread Areg Alimian
Liam, This link might help, http://www.eclectica.ca/howto/ssl-cert-howto.php#rootc -Areg -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Liam Escario Sent: Monday, August 02, 2004 1:33 AM To: [EMAIL PROTECTED] Subject: openssl newbie HELP! Hi! Can any

RE: openssl Newbie ( PRNG seed )

2002-09-11 Thread Jeffrey Altman
There is no need to call RAND_screen() more than once. 0.9.4 is vulnerable to attacks because the random number generator is not seeded with sufficient entropy. 0.9.6e takes more time in order to generate the necessary entropy. Using a hardcoded seed value with make your connections vulnerable.

RE: openssl Newbie ( PRNG seed )

2002-09-11 Thread Neelay Shah
2002 11:39:01 -0400 To: <[EMAIL PROTECTED]> Subject: RE: openssl Newbie ( PRNG seed ) > Hi Rich, > > Any chance you can help me? I am testing my outbound email. > Can you please reply to me so that I can see if my message > made it to you? > > Thanks, > >

RE: openssl Newbie ( PRNG seed )

2002-09-04 Thread Ed Sanborn
I guess it's working...;^( sorry folks to disturb you all... -Ed -Original Message- From: Ed Sanborn Sent: Wednesday, September 04, 2002 11:39 AM To: [EMAIL PROTECTED] Subject: RE: openssl Newbie ( PRNG seed ) Hi Rich, Any chance you can help me? I am testing my outbound

RE: openssl Newbie ( PRNG seed )

2002-09-04 Thread Ed Sanborn
PROTECTED] Subject: Re: openssl Newbie ( PRNG seed ) >>"How important is the PRNG seed to the >>total security of your program ?" How quickly they forget... :( Your SSL connections can be broken. Several years ago Netscape used a poor random seed (like getpid() o

Re: openssl Newbie ( PRNG seed )

2002-09-04 Thread Rich Salz
>>"How important is the PRNG seed to the >>total security of your program ?" How quickly they forget... :( Your SSL connections can be broken. Several years ago Netscape used a poor random seed (like getpid() or'd into the time() or some such), and Dave Wagner (et al) at Berkeley wer

RE: openssl Newbie ( PRNG seed )

2002-09-04 Thread Boyle Owen
Good question... I'm not an expert on the cryptography aspect but I think what happens is that your encryption becomes "predictable" - that is, the same input plaintext, encrypted twice, produces the same encrypted data. This leaves you open to a frequency analysis attack. This is not the case

Re: OpenSSL Newbie---help

1999-08-30 Thread David Lang
Lang On Mon, 30 Aug 1999, Kaur Virunurm wrote: > Date: Mon, 30 Aug 1999 11:36:28 +0300 > From: Kaur Virunurm <[EMAIL PROTECTED]> > Reply-To: [EMAIL PROTECTED] > To: [EMAIL PROTECTED] > Subject: Re: OpenSSL Newbie---help > > > I am new to open ssl, and in fac

Re: OpenSSL Newbie---help

1999-08-30 Thread Andy Polyakov
> > 2) If you were to attempt acceleration where do you get the most bang for > > your proverbial buck; just doing the encryption/decryption or doing the > > entire SSL on a card ? > > The encryption is where you'd get the "bang for the buck." ??? One wants to accelerate a server, right? And what