Several people on this list helped me out so I thought I'd report my
successes. I've compiled OpenSSL 0.9.3a with the options
no-rsa no-idea no-rc2 no-rc4 no-rc5 no-bf no-md2 no-mdc2 no-cast
I believe this relieves problems with the RSA patent and trade secrets
and leave the strong cipher
EDH-DSS-DES-CBC3-SHA
I've also implemented a client and server with non-blocking
SSL_accepts and non-blocking SSL_reads so I can testify that it's all
possible.
Does anyone know if I can/should further remove any of the following?
md5 sha hmac ripemd \
des \
bn dsa dh \
buffer bio stack lhash rand err objects \
evp asn1 pem x509 x509v3 conf txt_db pkcs7 pkcs12 comp
David Marwood
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]