RE: Anyone where to get a signed SSL certificate cheap?

2003-02-14 Thread John . Airey
You are right about the price Jo. They've hiked their prices a lot (must be to pay for Mark Shuttleworth's space trip...). If you are representing a charity you may be able to negotiate a lower price. We did that last year and received a wildcard certificate at a discount. - John Airey, BSc (Jt

PKCS#12: MAC security benefits?

2003-02-14 Thread Aleix Conchillo Flaque
hi, basically, the question is: which are the security benefits of adding a MAC to a PKCS#12? thanks in advance. regards, aleix __ OpenSSL Project http://www.openssl.org User Support Mailing

RE: Anyone where to get a signed SSL certificate cheap?

2003-02-14 Thread John . Airey
Try globalsign www.globalsign.com, 175 Euro ($189 or £116.91 in proper money). - John Airey, BSc (Jt Hons), CNA, RHCE Internet systems support officer, ITCSD, Royal National Institute of the Blind, Bakewell Road, Peterborough PE2 6XU, Tel.: +44 (0) 1733 375299 Fax: +44 (0) 1733 370848 [EMAIL

Re: PKCS#12: MAC security benefits?

2003-02-14 Thread Dr. Stephen Henson
On Fri, Feb 14, 2003, Aleix Conchillo Flaque wrote: hi, basically, the question is: which are the security benefits of adding a MAC to a PKCS#12? Its an integrity check so it stops an attacker changing the contents of the file, however some implementations will silently ignore an absent

Internet Explorer and OpenSSL: SSL_accept problem

2003-02-14 Thread Güsmar, Lars
Title: Internet Explorer and OpenSSL: SSL_accept problem Hello, maybe a stupid question with a simple solution, however, I didn't found anything about that in the open_ssl archives. My simple webserver (HTTP1.0, mostly equal to openssl wserver example) provides https access with

Re: Internet Explorer and OpenSSL: SSL_accept problem

2003-02-14 Thread Tim Regovich
Lars, I had a similar problem a few years ago. What was happening to me was that IE was actually making two nearly simultaneous requests to my server, and effectivly ignoring one of them. I will see if I can find my notes on this one (I searched the archives, but didn't find anything :), but I

Re: Encryption / Decryption

2003-02-14 Thread Bodo Moeller
On Thu, Feb 06, 2003 at 01:38:11PM +, Séamus O'Toole wrote: I have recently downloaded the latest version of OpenSSL and I am using it in the development of a Secure Voice over IP Project. Is there a way to extract the session key from the SSL session and use it to encrypt the data,

r.e. OpenSSL and MacOS (pre-OS X)

2003-02-14 Thread Rodney Thayer
I'm trying to build OpenSSL 0.9.7 on OS X 10.2.3 with CodeWarrior. I tried using the 'mcp' files in the MacOS directory, but they don't work. Specifically, they can't find /usr/include/sys/types.h. Short of being grumpy the compiler's too clueless to find fundamentals like /usr/include, anyone

-fomit-frame-pointer ?

2003-02-14 Thread Jasper Spit
Hi, I have developed some c++ wrapper classes around openssl. Now I need to be able to throw exceptions from within the different openssl callbacks like e.g. the password verification callback. This is not a problem on windows, but it is when using a gcc platform like e.g. linux. For this to

Problems with DSA and engine ubsec

2003-02-14 Thread Jonathan Hersch
Hi, I'm signing and verifying documents using DSA and have run into a couple of problems. I'm working with OpenSSL 0.9.7 on Linux with a Broadcom crypto card based on the 5821 (so OpenSSL engine type is ubsec). I have version 1.81 of the Broadcom driver. (1) While testing I found that

Re: -fomit-frame-pointer ?

2003-02-14 Thread Geoff Thorpe
* Jasper Spit ([EMAIL PROTECTED]) wrote: Hi, I have developed some c++ wrapper classes around openssl. Now I need to be able to throw exceptions from within the different openssl callbacks like e.g. the password verification callback. This is not a problem on windows, but it is when using

Re: Problems with DSA and engine ubsec

2003-02-14 Thread Geoff Thorpe
Hi Jonathan, Nice diagnosis, I'm just checking a few things in the source before I comment, but in the mean-time could you please (for now) just split out item (1) and create a ticket in the RT tracker system with it? http://www.aet.tu-cottbus.de/rt2/ We'll deal with the other items in good