Re: Recommendation for SSO Crypto

2012-05-16 Thread Marco Molteni
On May 15, 2012, at 21:15 , Paul Bergen wrote: [..] I see lots of documents about using SSO-technologies that require inter-server communication, or require licensed technology (like Microsoft's stuff). But I can't find a document that explains how to implement a simple SSO system like I

Re: ECDH

2012-05-16 Thread Fábio Resner
Ah I see! Now it makes sense hehe! Thank you, On Tue, May 15, 2012 at 4:57 PM, Matt Caswell (fr...@baggins.org) fr...@baggins.org wrote: On 15/05/12 20:21, Fábio Resner wrote: I don`t know if this is the correct place to make this conceptual question but here it goes: In DH you must

Hash named certificate and standards?

2012-05-16 Thread Jan Danielsson
Hello, When creating hash named certificate files for CA's and such (openssl x509 -hash -in ca.crt -inform der -noout), is the algorithm/seed standardized in SSL in any way? I've encountered a product which has SSL in its title which produces hashes which aren't the same as those created

Re: Hash named certificate and standards?

2012-05-16 Thread Dr. Stephen Henson
On Wed, May 16, 2012, Jan Danielsson wrote: Hello, When creating hash named certificate files for CA's and such (openssl x509 -hash -in ca.crt -inform der -noout), is the algorithm/seed standardized in SSL in any way? No it's an OpenSSL specific thing which is just used as a quick way

Question on enhancing OpenSSL logs

2012-05-16 Thread KThirumal
Team I have a query on enhancing the OpenSSL logs, As you know, SSL_accept is just one call using SSL library for an SSL handshake, but there are couple of steps inside this process like Client Hello / Server Hello, etc. What if i need to find the internal failures in SSL handshake ? Is there

Re: Question on enhancing OpenSSL logs

2012-05-16 Thread Marek . Marcola
Hello, You may trace connect/accept progres defining some callback function: /** * SSL connection info callback. * * @paramssl SSL connection socket * @paramtypeconnection type * @paramval

Openssl wildcard certificate handling

2012-05-16 Thread Nou Dadoun
Hi folks, just wanted to throw out a request for pointers about whether openssl has any built-in support (or sample code) for matching/handling wildcard certificates. (I know that it has support for generating them, I'm particularly looking for samples of matching in an sni callback or