Re: CA Key and Self-Signed Server Certificate Generation

2005-01-11 Thread Ringaby Anders
Hello again, Servie. Since sign.sh is a script, have you checked that the interpreter at line number 1 (should be "#!/bin/sh" in this case) is correct? Maybe the path is different in your system, or another interpreter is required like ksh or bash (that would be #!/bin/ksh or #!/bin/bash on lin

Re: CA Key and Self-Signed Server Certificate Generation

2005-01-11 Thread Dr. Stephen Henson
On Mon, Jan 10, 2005, Servie Platon wrote: > > > Hello openssl gurus, > > I wanted to create my own private CA and use this to > sign CSR's instead of requesting a commercial CA to > sign my CSR. > > I have downloaded the latest tar.gz file and was able > to compile openssl without a problem.

Re: CA Key and Self-Signed Server Certificate Generation

2005-01-11 Thread Servie Platon
Hello Dr. Henson, Thank you for the reply Sir. --- "Dr. Stephen Henson" <[EMAIL PROTECTED]> wrote: > On Mon, Jan 10, 2005, Servie Platon wrote: > > > > > > > Hello openssl gurus, > > > > I wanted to create my own private CA and use this > to > > sign CSR's instead of requesting a commercial

Re: CA Key and Self-Signed Server Certificate Generation

2005-01-11 Thread Servie Platon
Hello Mr. Anders, Thank you very much on your reply. --- Ringaby Anders <[EMAIL PROTECTED]> wrote: > > > Hello again, Servie. > > > Since sign.sh is a script, have you checked that the > interpreter > at line number 1 (should be "#!/bin/sh" in this > case) is correct? > Maybe the path is dif

The time of the openssl-ciphers is constant?

2005-01-11 Thread Tyler Durden
Hello, I am trying to get the transfering time between a client and a server with different size of data because I want to know that ciphers are more efficient and after I can choose the cipher more efficient and secures, because I want build a library for to transfer data in mobile devices (PDA,

Re: The time of the openssl-ciphers is constant?

2005-01-11 Thread Charles B Cranston
If I understand you correctly the time at the server only starts getting bigger proportional to the transfer size when the size of the transfer exceeds some critical value? This is indicative of a fixed portion and a variable portion of the observation, with the fixed portion dominating when the v

Server side of RSA takes longer

2005-01-11 Thread Charles B Cranston
For example, the public key operation of RSA, which is done at the client (encoding the session key in the server's public key) is very highly optimized by using 0x10001 (1001) as the public exponent; this requires only 16 multiplies and one add. But the server must decrypt the session

Re: The time of the openssl-ciphers is constant?

2005-01-11 Thread PAILLETTE Frédéric
Hi ! If I understand correctly, the elapsed time in the server application is only proportional when files are big (1 or 10 Mb). Isn't due to the server certificate ?!?! The server always sends one (or more) certificate (few kb) and perhaps that the client do not send a certificate, that depends

Re: CA Key and Self-Signed Server Certificate Generation

2005-01-11 Thread Dr. Stephen Henson
On Tue, Jan 11, 2005, Servie Platon wrote: > Hello Dr. Henson, > > Thank you for the reply Sir. > > Could you please advise where I could locate the CA.pl > script and the appropriate documentation? > CA.pl should be installed when OpenSSL is. By default it will be in /usr/local/ssl/misc. Ther

RE: The time of the openssl-ciphers is constant?

2005-01-11 Thread David Schwartz
> Hello, > I am trying to get the transfering time between a client and a server > with different size of data because I want to know that ciphers are > more efficient and after I can choose the cipher more efficient and > secures, because I want build a library for to transfer data in mobile > de

Re: CA Key and Self-Signed Server Certificate Generation

2005-01-11 Thread Servie Platon
Hello Mr. Ringaby, --- Ringaby Anders <[EMAIL PROTECTED]> wrote: > > > Hello again, Servie. > > > Since sign.sh is a script, have you checked that the > interpreter > at line number 1 (should be "#!/bin/sh" in this > case) is correct? > Maybe the path is different in your system, or > anothe

Re: CA Key and Self-Signed Server Certificate Generation - Follow-up

2005-01-11 Thread Servie Platon
Hello Dr. Henson, And thank you again for this advice. --- "Dr. Stephen Henson" <[EMAIL PROTECTED]> wrote: > I suggest you ignore that script: and use the CA.pl > script and the appropriate > documentation instead. As suggested by you, I used the CA.pl script which works okay. On this issue, I