RE: Cipher selection

2010-08-11 Thread Tim Cloud
Let's pretend for a moment that an out of the box application uses openssl to provide access not through a browser, but rather through a SOAP client like Eclipse. And let's also say that you have no access to the code internal to that application. Is there any other way to limit the ciphers? So

RE: Cipher selection

2010-08-12 Thread Tim Cloud
having a background as a SQL DBA, I have no idea how to do that. Is there an easy answer? The server will be running Windows 2003 32-Bit, and I just want to compile it with only the FIPS compliant strong ciphers. Any help is greatly appreciated. Thanks. -Tim Cloud

RE: Cipher selection

2010-08-17 Thread Tim Cloud
ell) -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Jakob Bohm Sent: Monday, August 16, 2010 4:18 AM To: openssl-users@openssl.org Subject: Re: Cipher selection On 12-08-2010 18:03, Tim Cloud wrote: > Q: I am a bit confuse