> But then, can't you just compile everything as normal, and
> change the allowed ciphersuites in the configuration..? It surely can't
> be illegal to compile the 3DES in, but simply not use it.
In fact, that's what I'll plead for, if there is no other simple solution.
It may even get accepted ! The problem here also stems from the fact that
the product is to be used by a governmental entity. I have to be very
careful about this, because it's easier to get into trouble than when
you are a simple citizen... But, well, as I said before, for now our
"security people" have been quite helpful, even giving me some advice in
order to correctly fill out the inevitable forms, so I hope to get thru
this process without too many problems. It sure would have been even
painless if I could have left 3DES aside, but it seems that for now
it is still necessary for PKCS#12.
I'll keep the list informed, as I know I'm not the only French citizen
reading it.
Regards,
Bruno
--
-- Service Hydrographique et Oceanographique de la Marine --- Service INF
-- 13, rue du Chatellier --- BP 426 --- 29275 Brest Cedex, FRANCE
-- Phone: +33 2 98 22 17 49 --- Email: [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
