Re: any vulnerabilities in a scenario in which root certificate authorithy is a local file

2009-07-31 Thread ohaya
Hi, I think that the same needs to be said for the private key associated with the server cert. That needs to be kept securely, and not distributed, right? Jim Kyle Hamilton wrote: > Only if they have the CA's private key, or if the CA is using MD5 and > is otherwise subject to a "prei

Re: any vulnerabilities in a scenario in which root certificate authorithy is a local file

2009-07-31 Thread Kyle Hamilton
Only if they have the CA's private key, or if the CA is using MD5 and is otherwise subject to a "preimage" attack. The CA's certificate file is harmless to distribute under most circumstances. -Kyle H 2009/7/30 Selçuk Cihan : > Hi, we have a client-server application. We want our client(win32 >

any vulnerabilities in a scenario in which root certificate authorithy is a local file

2009-07-31 Thread Selçuk Cihan
Hi, we have a client-server application. We want our client(win32 application) to be sure that it is talking to our server indeed(server auth. only), and we wanted to have this communication secured. We are using openssl on the client side. Our server is a java application. We have created our roo