Re: How to generate a Diffle-Hellman key and sign it by demoCA?

2000-01-20 Thread Bodo Moeller
Dr Stephen Henson <[EMAIL PROTECTED]>: > BTW would anyone mind if this was changed so gendh and dh became dhparam > and 'dh and 'gendh' utilimately would generate and handle DH keys? No, we should introduce consistent names. However for compatibility the current programs could print a warning a

Re: Hardware crypto accelerators

2000-01-20 Thread Rizwan Mallal
Hardware acclerators are also manufactured by Hi/Fn, BlueSteel Networks (now Broadcom), and IRE. Hi/Fn's 6500 is shipping. Does RSA only. Their 7811/7511 does the bulk ssl cipher stuff. BlueSteel's uBsec 5601 is in alpha stage. This is touted as an SSL chip. Samples should be out by March 15th,

Re: How to generate keys to use DH-RSA-DES-CBC3-SHA cipher?

2000-01-20 Thread Lutz Jaenicke
On Wed, Jan 19, 2000 at 11:01:13AM +0100, [EMAIL PROTECTED] wrote: > Hello: > > I am a newbe to openssl, I know openssl supports > DH-RSA-DES-CBC3-SHA and DH-DSS-DES-CBC3-SHA as > "ciphers". But I don't know how to let openssl use > those 2 ciphers :-( > > Is there any document talking

Re: 3DES - 168 or 192 bits?

2000-01-20 Thread Andrew Cooke
> Josh Berezin wrote: > > Parity -- of course! > > Not to split hairs with Mr. Cooke, but 3DES is certainly much more > than twice as secure as single DES, even if it does only provide 112 > effective bits of encryption. More like 2^56 times more secure > (against an exhaustive search). Sorry

Creating X509_NAME_ENTRY with type UTF8String

2000-01-20 Thread Kwon, YongChul
I made X509_NAME for rewriting Subject DN in X509_REQ. but when I tried to make X509_NAME_ENTRY of V_ASN1_UTF8STRING data type, OpenSSL always failed with error - d2i_ASN1_type_bytes() wrong type. It's bug? Should I make my own patch? Thanks.

DLL problem

2000-01-20 Thread Lucia Bonelli
Hi all. I succefully compiled openssl0.9.4 on VC++6.0 with the /MD option (for multithreading). Then, I built another DLL (also with the /MD option) wich uses the libeay32.dll, particularly the PEM I/O routines. At run time, everytime my DLL calls such routines (for example PEM_ASN1_write ) an

Re: DLL problem

2000-01-20 Thread Dr Stephen Henson
Lucia Bonelli wrote: > > Hi all. > > I succefully compiled openssl0.9.4 on VC++6.0 with the /MD option (for > multithreading). > Then, I built another DLL (also with the /MD option) wich uses the > libeay32.dll, particularly the PEM I/O routines. At run time, everytime > my DLL calls such rou

IIS->Apache key conversion

2000-01-20 Thread Alfonso Urdaneta
How can I convert an IIS private key into the format used by Apache-SSL? I have a certificate and key issued by Verisign for an IIS server. The server is being replaced by a Linux box running Apache-SSL. I have the certificate in the right format but not the private key. I have tried the prog

compiling openssl 0.9.4 on WinNT using Mingw32

2000-01-20 Thread Vaclav Ovsik
Hi Everybody I built the openssl 0.9.4 on WinNT 4.0 CZE with serv.pack 4 using mingw32 compiler. I encountered with problems that follows 1) Symbol WINDOWS is not defined. I defined this symbol in makefiles See attached patch. Mumit Khan means that is not desirable to define this symbol by