HI , I have 300 mails still befor me. So I make it short. look at hht://www.pseudonym.org/ssl/ I hope this will help you for the next steps. hirntod On Mon, 25 Sep 2000, Vikram Kaul wrote: > > > Hi !!! > I am new to SSL. Just started reading up and experimenting on it a week back. I > have been trying to run some example programs (after modification). As a > specific instance, here is what I did. > > 1. Create the client and server methods using SSL_v3_client_method() and > SSL_v3_server_method() > 2. Create the SSL CONTEXTS out of them. > 3. Create an RSA private key and corresponding certificate with md5 message > digest. Printing out the key details on the stdout gives Signature Algorithm: > md5withRSAEncryption > 4. Use the SSL_set_connect_state() and SSL_connect() in the client > 5. Use the SSL_accept() in the server. > > Once the handshake is complete (intricate details of which are still unclear to > me), I check two things. The SSL suite that is being used and the "peer > certificate" at both the client and server. Since the client doesn't use one, > the server correctly understands that. Similarly, the client correctly > understands the certificate of the server. I check the suite using the > SSL_get_cipher() function. It returns with DES-CBC3-SHA > > I am sure that I am missing something very critical. Anyway...if creating a RSA > key specifically with md5 returned with a success, why does the function return > with SHA ? > > Is there no way I can control the algorithm. Like why was DES-CBC3 automatically > choosen ? > > How can I track the actual handshake.. step-by-step. The higher level functions > are nice.. but is there any way I could > get a tap into them and track the actual handshake ??? > > I have a whole bunch of other questions.. but I would appreciate help on the > ones bothering me right now.. > > regards.... > > Kaul. > > > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List [EMAIL PROTECTED] > Automated List Manager [EMAIL PROTECTED] > ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
