Re: Certi

2000-04-26 Thread David Lang
-BEGIN PGP SIGNED MESSAGE- John, I have 600 sites, each with their own key/cert and 16 servers (soon to be 32 servers) how can I possibly plan on entering the passphrase in for each site on each server on startup? David Lang On Wed, 26 Apr 2000, John Hartnup wrote: > Of cou

Re: Help encoding a PEM key

2000-04-26 Thread David Lang
-BEGIN PGP SIGNED MESSAGE- did you ever get an answer back on this? I am looking at doing the same thing and having difficulties figuring out what I need to do. David Lang On Tue, 18 Apr 2000, Mathieu Legare wrote: > Date: Tue, 18 Apr 2000 14:42:02 -0400 > From: Mathieu Legare &

RE: Proxy or Firewall

2000-04-28 Thread David Lang
shifts into a "passthrough" mode and can no longer see the contents of the connection. The SSL is one session from end to end. David Lang On Fri, 28 Apr 2000, James Dabbs wrote: > Date: Fri, 28 Apr 2000 07:36:42 -0400 > From: James Dabbs <[EMAIL PROTECTED]> > Reply-T

Batch password changes of certs

2000-09-22 Thread David Lang
rts (insisting on getting the passphrases from the user, even if stdin is redirected) Does anyone ahve a suggestion before I dive in to the source to yank out this feature? David Lang -BEGIN PGP SIGNATURE- Version: PGP 6.5.2 iQEVAwUBOcs0sT7msCGEppcbAQH83gf8D6KOgHFwi1wFlOAAtOAcw3JzYA1Nh

Re: SSL + VirtualHost in Apache 1.3.x

2000-10-14 Thread David Lang
if you do IP based virtualhosts it will work. David Lang On Fri, 13 Oct 2000, Vadim Fedukovich wrote: > Date: Fri, 13 Oct 2000 17:02:04 +0300 (EEST) > From: Vadim Fedukovich <[EMAIL PROTECTED]> > Reply-To: [EMAIL PROTECTED] > To: "'[EMAIL PROTECTED]'"

RE: SSL + VirtualHost in Apache 1.3.x

2000-10-14 Thread David Lang
HTTP1.1 IIRC, if that's still not everywhere how long until TLS is? David Lang On Fri, 13 Oct 2000, Norman Mackey wrote: > Date: Fri, 13 Oct 2000 11:16:28 -0700 > From: Norman Mackey <[EMAIL PROTECTED]> > Reply-To: [EMAIL PROTECTED] > To: "'[EMAIL PROTECTED]'&q

RE:

2000-11-10 Thread David Lang
SSH is a secured telnet, plus a ftp, plus a tunnel for arbatrary ports. it can be configured to be only a secured telnet, but nothing stops your user from reconfiguring it to use it as a tunnel. David Lang On Wed, 8 Nov 2000, David Walgamotte wrote: > Date: Wed, 8 Nov 2000 08:52:08 -0

Re: Kurt Seifred's article on securityportal

2000-12-19 Thread David Lang
r to check it) you will accept it and are therefor vunerable. nothing new, just a repeat of the statement that if you don't verify the cert it doesn't really do you any good. David Lang On Tue, 19 Dec 2000, Greg Stark wrote: > Date: Tue, 19 Dec 2000 11:40:11 -0500 > From: Gr

RE: Rainbow Cryptoswift cards

2001-01-19 Thread David Lang
l SSL accelerator 300 connections/sec 10-20% CPU nowdays the raw machines will be faster, but you also need to have CPU time to run CGIs etc. I think it's unlikly that you will gain much by useing your main CPUs (assuming you get an appropriatly sized SSL accelerator David Lang On Fri, 19 Jan 2

RE: REMOVE

2002-06-05 Thread David Lang
seems that way. (as someone who has attempted to get off the list a few times, but cannot get majordomo to cooperate) and no I didn't save the welcome message from when I joined years ago. David Lang On Tue, 4 Jun 2002, Dilkie, Lee wrote: > Date: Tue, 4 Jun 2002 15:01:32 -0400 > Fr

Re: REMOVE

2002-06-06 Thread David Lang
ient of [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] I've attempted to unsubscribe all four addresses and get a response of 'name not subscribed' David Lang On Wed, 5 Jun 2002, Michal Bachorik wrote: > Date: Wed, 5 Jun 2002 12:10:52 +0200 > Fro

RE: Server cert password protection

1999-04-28 Thread David Lang
, this is > the kind of stuff you have to use. You can't do it with pure > software. I use the nCipher boxes extensivly, they run from $4000-10,000 depending on modle (the $10,000 version can do 300 sigs/sec while the $4000 does 75) They are wonderful for taking the load off of the CPU

Re: OpenSSL Newbie---help

1999-08-30 Thread David Lang
also there is a company called rainbow that makes PCI card based accelerators. I chose the nCipher SCSI boxes for my setup for maximum future flexibility. Warning, don't faint when you see the cost of these products. `get one for evaluation and check out the performance yourself. David

Re: What US companies need to know about RSA

1999-09-23 Thread David Lang
This is getting slightly off-topic, but without risking it what options do US companies have for items such as the SSLwrapper that was mentioned, or other similar items. David Lang On Wed, 22 Sep 1999, Terrell Larson wrote: > Aaron, > > In your situation I would not risk it either

Re: What US companies need to know about RSA

1999-09-23 Thread David Lang
my question was really what options are available as part of #3 for things like stunnel, or a SSL capable version of lynx or wget (command line way to retreive a web page), or even just a SSL capable version of telnet. David Lang On Thu, 23 Sep 1999, Bodo Moeller wrote: > David Lang <

Re: mailtag.com is fixed, I think

2001-02-25 Thread David Lang
mailers are encountered. David Lang On Sun, 25 Feb 2001, David Schwartz wrote: > Date: Sun, 25 Feb 2001 23:13:58 -0800 > From: David Schwartz <[EMAIL PROTECTED]> > Reply-To: [EMAIL PROTECTED] > To: [EMAIL PROTECTED] > Subject: Re: mailtag.com is fixed, I think > > >

Re: SQL DB instead of index.txt

2002-01-28 Thread David Lang
with postgres 7.1 the 8k limit is gone anyway. On Sun, 27 Jan 2002, Bear Giles wrote: > Date: Sun, 27 Jan 2002 19:23:55 -0700 (MST) > From: Bear Giles <[EMAIL PROTECTED]> > Reply-To: [EMAIL PROTECTED] > To: [EMAIL PROTECTED] > Subject: Re: SQL DB instead of index.txt > > > A simple question, bu