On Wed, Jan 19, 2000 at 11:01:13AM +0100, [EMAIL PROTECTED] wrote:
> Hello:
>
> I am a newbe to openssl, I know openssl supports
> DH-RSA-DES-CBC3-SHA and DH-DSS-DES-CBC3-SHA as
> "ciphers". But I don't know how to let openssl use
> those 2 ciphers :-(
>
> Is there any document talking about step-by-step
> procedures to let openssl use those 2 ciphers?
>
> In order to use DH-RSA-DES-CBC3-SHA or
> DH-DSS-DES-CBC3-SHA ciphers, how can I:
>
> 1. generate a private key?
> 2. request a CSR?
> 3. sign that CSR using demoCA?
The EDH-RSA-DES-CBC3-SHA cipher is using ephemeral DH keys with RSA
authentication, so you can stay with the normal RSA keys you already
have(?).
Additionally, your code must have a temporary DH key available.
Based on the list of ciphers the client presents, the first cipher the
OpenSSL based server suppports is used.
If the EDH ciphers are listed early, they are used.
Best regards,
Lutz
PS. The same applies to DSS, you must have DSA certificates to use these
ciphers and the DH keys to use EDH-DSS-DES-CBS3-SHA.
--
Lutz Jaenicke [EMAIL PROTECTED]
BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/
Lehrstuhl Allgemeine Elektrotechnik Tel. +49 355 69-4129
Universitaetsplatz 3-4, D-03044 Cottbus Fax. +49 355 69-4153
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
