On Tue, Feb 08, 2000 at 02:49:47PM -0800, Alex Cachia wrote:
> I'd like to generate a self signed CRT for the Netscape Directory Server 4.0
> and use JNDI with JSSE to access the directory. The Directory has an export
> strength cipher suite available, thus I believe I need to sign the CSR it
> generates with a compatible CA CRT.
>
> I've managed to generate the 512 bit RSA key, but cannot find how to "limit the
> cipher suite to only include things like EXP-RC4 and EXP-RC2".
The ciphersuites are influenced by the cipher selection string. For testing
(s_server/s_client) it is called with the "-cipher STRING" option. The
string for you "only export ciphers" should simply be "EXPORT:!ADH".
Within your code you would call e.g. SSL_CTX_set_cipher_list(ctx, "EXPORT:!ADH")
Best regards,
Lutz
--
Lutz Jaenicke [EMAIL PROTECTED]
BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/
Lehrstuhl Allgemeine Elektrotechnik Tel. +49 355 69-4129
Universitaetsplatz 3-4, D-03044 Cottbus Fax. +49 355 69-4153
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
