DES-CBC3-MD5

1999-09-18 Thread Tim Canfield
I know that there have been some problems in the past with DES-CBC3-MD5. I am having problems connecting to a server I am writing with browsers when using this cipher. All the fixes I have seen have been on the client side. I also have a client which is similar to s_client. This has the same

OCSP patch ...

1999-09-18 Thread Massimiliano Pala
Hi, I have attached the OCSP patch for the OpenSSL (SNAP-19990907). It is currently NOT tested, btw it seems to work (at least it compiles, hehehe!!! ) If you have questions, please mail me. Read the INSTALL and README files carefully BEFORE attempting any installation. C'you,

Re: What US companies need to know about RSA

1999-09-18 Thread Gregory Stark
I would like to add one more piece to this puzzle. There is one large set of potential U.S. users that can use RSA royalty-free; the U.S. federal government. Here are two references. From the RSA FAQ, section 6.3.1 http://www.rsasecurity.com/rsalabs/faq/6-3-1.html The U.S.

Re: DES-CBC3-MD5

1999-09-18 Thread René G. Eberhard
Did you see that SSL 3.0 / TLS 1.0 only support 'SSL_RSA_WITH_3DES_EDE_CBC_SHA'. There's no 3DES with MD5 in SSL 3.0 / TLS 1.0. Rene -- --- Rene G. Eberhard Mail : [EMAIL PROTECTED] - Original Message - From: Tim Canfield

Re: DES-CBC3-MD5

1999-09-18 Thread Tim Canfield
Yes, you are right. Sorry I missed that. SSL 3.0 does support DES-CBC-SHA. I can get this one to work from s_client, but I can't get it to work from Netscape 4. Any ideas? Is there some fix which I need to activate to make this work. I am currently using SSL_OP_ALL, in an attempt to fix

Getting setup with DHE and RSA

1999-09-18 Thread David Murphy
Hi - We re trying to use the cipher suites :- SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHASSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA and despite much time spent are getting absolutely nowhere trying to figure out how to setup so that that the OpenSSL server_c will accept them during an SSL handshake

Re: Getting setup with DHE and RSA

1999-09-18 Thread Dr Stephen Henson
David Murphy wrote: Hi - We re trying to use the cipher suites :- SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA and despite much time spent are getting absolutely nowhere trying to figure out how to setup so that that the OpenSSL server_c will accept them