Several people on this list helped me out so I thought I'd report my
successes.  I've compiled OpenSSL 0.9.3a with the options

        no-rsa no-idea no-rc2 no-rc4 no-rc5 no-bf no-md2 no-mdc2 no-cast 

I believe this relieves problems with the RSA patent and trade secrets
and leave the strong cipher

        EDH-DSS-DES-CBC3-SHA 

I've also implemented a client and server with non-blocking
SSL_accepts and non-blocking SSL_reads so I can testify that it's all
possible.

Does anyone know if I can/should further remove any of the following?

         md5 sha  hmac ripemd \
        des       \
        bn  dsa dh \
        buffer bio stack lhash rand err objects \
        evp asn1 pem x509 x509v3 conf txt_db pkcs7 pkcs12 comp

David Marwood
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to