Re: Threads on FreeBSD3

1999-07-09 Thread Ben Laurie
Holger Reif wrote: > > plasma schrieb: > > I'd like to know, when will openssl use thread? > > Don't you rather want to know when *Apache* uses threads? To which the answer is "in version 2". Except for Windows, which already uses threads. Cheers, Ben. -- http://www.apache-ssl.org/ben.html

Certificate Purpose

1999-07-09 Thread Kevin Fan
Hello!! I'm trying to generate certificates whose purpose are restricted. i.e, one certificate/key can only be used to sign or key exchange, or I've request some certificates from Verisign and Thawte. We can see the certificate/key purpose in IE5, and those certificate issued by Verisign and

RE: verify callbacks, error reporting, CA-lists? (newbie) (long)

1999-07-09 Thread Leon Brits
Hi All, I have a Win program that communicates securely with one of our servers. We are still running SSLeay-0.8.1. (Don't touch something when it works, unless you must). We want to support PKCS#12 files in our client and I had to upgrade to OpenSSL-0.9.3.a (the server guys are also in the proce

Certificate verify

1999-07-09 Thread Oliver Floericke
Hi there, I'm not quite sure if this is a little bit off topic but maybe someone can answer it anyway: In the protocol of SSL there is this certificate_verify_message which is send after right the client has send its certificate. The message is composed of a combination of the recently exchanged

RE: verify callbacks, error reporting, CA-lists? (newbie) (long)

1999-07-09 Thread Goetz Babin-Ebell
At 12:29 09.07.99 +0200, you wrote: >Hi All, >closes the connection (server is set to verify). This sonnection did work >when I was still using 0.8.1. > >Any suggestions? > // CTX > ctx = SSL_CTX_new(SSLv23_method()); > // This is newly added to disble TLSv1 (not in 0.8.1 code)

Re: Cypher Suites supported (more)

1999-07-09 Thread Theodore Hope
> I'll elaborate on my previous post. What I want is to implement a poor > man's SSL client which doesn't know what a certificate is but is capable > to connect to any secure Web server out there (Apache, IIS, Netscape). > > I see it has to support Diffie-Hellman, Triple-DES and SHA1 (goodbye to

Re: Cypher Suites supported (more) (some more)

1999-07-09 Thread Juan Carlos Castro y Castro
Theodore Hope wrote: > > I'll elaborate on my previous post. What I want is to implement a poor > > man's SSL client which doesn't know what a certificate is but is capable > > to connect to any secure Web server out there (Apache, IIS, Netscape). > > > > I see it has to support Diffie-Hellman, T

Re: Certificate verify

1999-07-09 Thread Bodo Moeller
On Fri, Jul 09, 1999 at 01:17:53PM +0200, Oliver Floericke wrote: > In the protocol of SSL there is this certificate_verify_message which is > send after right the client has send its certificate. The message is > composed of a combination of the recently exchanged messages, the master > secret

Re: Certificate verify

1999-07-09 Thread EKR
"Oliver Floericke" <[EMAIL PROTECTED]> writes: > I'm not quite sure if this is a little bit off topic but maybe someone can > answer it anyway: > > In the protocol of SSL there is this certificate_verify_message which is > send after right the client has send its certificate. The message is > com

Questions on s_client

1999-07-09 Thread Nikhil G. Daddikar
Hi, I am a new user and am looking at s_client.c My questions: * where in the code is the SSL negotiation (handshake between the client and server, verification of certificates etc.) taking place? * what does the SSL_total_renegotaions do Thanks! -- Nikhil G. Daddikar United Webs, Inc. 650-62

Solaris 2.5.1

1999-07-09 Thread Bill Stasiowski
hello, I'm trying to install the following on an ultra 2 running Solaris 2.5.1 - openssl-0.9.3a - mod_ssl-2.3.5-1.3.6 - apache_1.3.6 and the make test fails every time. also when I tried to do a make certificate for apache it just prints dots across the screen forever. so I just trie

FW:

1999-07-09 Thread Phil Burgard
> Apologies in advance if this is a dumb question. I have tried several > avenues before resorting to the mail list. I have made OpenSSL 0.9.3a for > NT for non-RSA algorithms (EDH-DSA-DES-SHA is selected). The test > programs (s_server and s_client) appear to run happily on the same machine >

Re: verify callbacks, error reporting, CA-lists? (newbie)(long)

1999-07-09 Thread Dr Stephen Henson
Goetz Babin-Ebell wrote: > > At 12:29 09.07.99 +0200, you wrote: > >Hi All, > > >closes the connection (server is set to verify). This sonnection did work > >when I was still using 0.8.1. > > > >Any suggestions? > > > // CTX > > ctx = SSL_CTX_new(SSLv23_method()); > > // This

Storing information on the server -- NEWBIE ?

1999-07-09 Thread Russell D. Weiss
Hey, I'm new to cryptography and I haven't done much with it. I have Apache-SSL working with a Thawte certificate. But I have a question? What's the best way to store information securely on my server? I have some PERL Crypt modules that I've played with, but do these support public key encry