Re: Enable 128 bit ciphers via server certificate

1999-11-11 Thread Holger Reif
James Johnson schrieb: I have written a SSL client for the VM/CMS web browser Charlotte. I would like to turn on 128 bit encryption when the servers certificate eneables it. I am unable to find any documentation about the structure of such a certificate. Can someone point me to it? Or to

Re: (whatever)

1999-11-11 Thread Chris Ridd
On Wed, 10 Nov 1999 21:25:05 +0100, "Rene G. Eberhard" wrote: On Sun, 07 Nov 1999 12:10:35 +0100, "Rene G. Eberhard" wrote: Cewl Mail. Can you please describe your problem a bit more detailed =)? BTW: It is not allowed to have more than one CN. It is - see X.500 et al - but do

Non ephemeral DH

1999-11-11 Thread Andreas Sterbenz
Hi, I am using OpenSSL 0.9.4 on Linux. I would like to use the DH_RSA and DH_DSS ciphers (non-ephemeral) with the apps/openssl program. They are not listed with "ciphers ALL" so I guess I have to recompile OpenSSL with some defines or something. Any pointers? BTW, I also noticed that the 1024

Re: DN formats

1999-11-11 Thread Richard Levitte - VMS Whacker
Chris.Ridd The reason I have to cover what's in drafts is because most of what's out there Chris.Ridd is implemented from drafts rather than final standards (leading to problems Chris.Ridd Chris.Ridd You're right; this is something I've noticed PKI vendors (in Chris.Ridd particular) do a

E-Commerce and SSL

1999-11-11 Thread Andy Roberts
Hi, I am in the research phase looking to open an e-commerce site. I have been reading about SSL and it seems that all SSL software is for LYNX or UNIX servers. Is there not any free SSL software for Win NT Web Servers? or any development tools to develop under Win NT. Please Advise...

OpenSsl: Bug report Test query?

1999-11-11 Thread SOETE Joël
Dear all, This report is just for fun because the original idea was to integrate iksd (Internet Kermit Service Daemon) but it seams that US laws does not allow us to transmit the header (just a header?) making the bridge between Kermit and OpenSsl libraries. Here is a bug report: the rebuild of

Re: Enable 128 bit ciphers via server certificate

1999-11-11 Thread James Johnson
On Thu, 11 Nov 1999 09:04:33 +0100 Holger Reif said: Best reference I know of is the file README.GlobalID of the mod_ssl distribution (www.mod_ssl.org) Thanks. That is just what I was looking for. The correct address is www.modssl.org James Johnson Email: [EMAIL

Re: E-Commerce and SSL

1999-11-11 Thread Holger Reif
www.opensa.de might help you Andy Roberts schrieb: Hi, I am in the research phase looking to open an e-commerce site. I have been reading about SSL and it seems that all SSL software is for LYNX or UNIX servers. Is there not any free SSL software for Win NT Web Servers? or any

Re: SSLeay equivalent...

1999-11-11 Thread Geoff Thorpe
hi there, I am attempting to write an application which can be built using either openSSL or SSLeay (latest releases) and I would like to take advantage of session caching. From the (limited ;-)) online docs it seems that for this to work, using openSSL, I need to call

Re: SSLeay equivalent...

1999-11-11 Thread Bodo Moeller
On Thu, Nov 11, 1999 at 03:36:01PM +, Geoff Thorpe wrote: [...] So, if SSL_CTX_set_session_id_context doesn't exist then that's probably because it hadn't been introduced at that point and isn't needed. I belive this issue only applies to session caches you implement yourself via

RE: Enable 128 bit ciphers via server certificate

1999-11-11 Thread Yunhong Li
Another place is www.microsoft.com ... search on SGC. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Holger Reif Sent: Thursday, November 11, 1999 12:05 AM To: [EMAIL PROTECTED] Subject: Re: Enable 128 bit ciphers via server certificate James Johnson

Re: Enable 128 bit ciphers via server certificate

1999-11-11 Thread Patrik Carlsson
I wrote some test code some months ago which checked if a given server certificate was SGC enabled. If I remember right you have to get the X509 extension object from the certificate and then loop over the stack of extensions and check for certain (Netscape/Microsoft SGC) NIDs. Patrik James

Re: patch Dr. Stephen Henson's upload

1999-11-11 Thread Dr Stephen Henson
Check the site at www.openssl.org. The patches in openssl-cvs are the output of the cvs stuff. The easiest way to get the latest development version is to either download the nightly snapshots or pull the very latest stuff via cvs or the various other techniques described. Steve. -- Dr Stephen