Re: On the fly certificate generation to send to the client

2009-05-25 Thread Steffen DETTMER
* Scott Gifford wrote on Wed, May 20, 2009 at 21:52 -0400: AngelWarrior srikanth.bemin...@gmail.com writes: but this still requires a CA kind of certificate right.I dont know if the client will be have a CA certificate to authenticate it.If I am wrong please explain me how it can be

Re: On the fly certificate generation to send to the client

2009-05-25 Thread Steffen DETTMER
* AngelWarrior wrote on Wed, May 20, 2009 at 15:18 -0500: I dont need to know with whom I am contacting but after contact my messages should be private. If you sent your message to just anybody, how can it be private? oki, Steffen --[ End of message

On the fly certificate generation to send to the client

2009-05-20 Thread AngelWarrior
Hi, I need some Info.I have a client and server application which requires a secure medium for the transferring of data between each other. Currently I am using openssl to achieve this using private and public key certificates with RSA encryption. I don't want to ship the certificate with each

Re: On the fly certificate generation to send to the client

2009-05-20 Thread Victor Duchovni
On Wed, May 20, 2009 at 02:37:58PM -0500, AngelWarrior wrote: I need some Info.I have a client and server application which requires a secure medium for the transferring of data between each other. Currently I am using openssl to achieve this using private and public key certificates with RSA

Re: On the fly certificate generation to send to the client

2009-05-20 Thread Scott Gifford
AngelWarrior srikanth.bemin...@gmail.com writes: I need some Info.I have a client and server application which requires a secure medium for the transferring of data between each other. Currently I am using openssl to achieve this using private and public key certificates with RSA encryption.

Re: On the fly certificate generation to send to the client

2009-05-20 Thread AngelWarrior
forgot to say at step 7 and 8 agreed upon encryption algorithm On Wed, May 20, 2009 at 3:18 PM, AngelWarrior srikanth.bemin...@gmail.comwrote: Thank you for replying. I am thinking of this design.Is this feasible.My design approach is mainly based on I dont need to know with whom I am

Re: On the fly certificate generation to send to the client

2009-05-20 Thread AngelWarrior
but this still requires a CA kind of certificate right.I dont know if the client will be have a CA certificate to authenticate it.If I am wrong please explain me how it can be done. On Wed, May 20, 2009 at 2:47 PM, Scott Gifford sgiff...@suspectclass.comwrote: AngelWarrior

RE: On the fly certificate generation to send to the client

2009-05-20 Thread David Schwartz
AngelWarrior srikanth.bemin...@gmail.com writes: but this still requires a CA kind of certificate right. I dont know if the client will be have a CA certificate to authenticate it.If I am wrong please explain me how it can be done. The server must have or know something that an attacker

RE: On the fly certificate generation to send to the client

2009-05-20 Thread David Schwartz
AngelWarrior srikanth.bemin...@gmail.com writes: but this still requires a CA kind of certificate right. I dont know if the client will be have a CA certificate to authenticate it.If I am wrong please explain me how it can be done. The server must have or know something that an

Re: On the fly certificate generation to send to the client

2009-05-20 Thread AngelWarrior
Thank you for replying. I am thinking of this design.Is this feasible.My design approach is mainly based on I dont need to know with whom I am contacting but after contact my messages should be private. client(My own application) Server (My own application) 1.(client)create a normal socket and

Re: On the fly certificate generation to send to the client

2009-05-20 Thread Victor Duchovni
On Wed, May 20, 2009 at 03:18:34PM -0500, AngelWarrior wrote: Thank you for replying. I am thinking of this design.Is this feasible.My design approach is mainly based on I dont need to know with whom I am contacting but after contact my messages should be private. For pseudonymous security,

RE: On the fly certificate generation to send to the client

2009-05-20 Thread David Schwartz
AngelWarrior wrote: Thank you for replying. I am thinking of this design.Is this feasible.My design approach is mainly based on I dont need to know with whom I am contacting but after contact my messages should be private. I don't think this is a coherent approach unless you layer some kind

Re: On the fly certificate generation to send to the client

2009-05-20 Thread Scott Gifford
AngelWarrior srikanth.bemin...@gmail.com writes: but this still requires a CA kind of certificate right.I dont know if the client will be have a CA certificate to authenticate it.If I am wrong please explain me how it can be done. Regular SSL only requires a certificate on the server.

RE: On the fly certificate generation to send to the client

2009-05-20 Thread David Schwartz
AngelWarrior wrote: but this still requires a CA kind of certificate right. I dont know if the client will be have a CA certificate to authenticate it.If I am wrong please explain me how it can be done. The usual solution (as used on secure web pages, for credit card orders, and so on) is