HI ,

I have 300 mails still befor me.
So I make it short.
look at hht://www.pseudonym.org/ssl/
 I hope this will help you for the next steps.

hirntod

On Mon, 25 Sep 2000, Vikram Kaul wrote:

> 
> 
> Hi !!!
> I am new to SSL. Just started reading up and experimenting on it a week back. I
> have been trying to run some example programs (after modification). As a
> specific instance, here is what I did.
> 
> 1. Create the client and server methods  using SSL_v3_client_method() and
> SSL_v3_server_method()
> 2. Create the SSL CONTEXTS out of them.
> 3. Create an RSA private key and corresponding certificate with md5 message
> digest. Printing out the key details on the stdout gives  Signature Algorithm:
> md5withRSAEncryption
> 4. Use the SSL_set_connect_state()  and SSL_connect() in the client
> 5. Use the SSL_accept()  in the server.
> 
> Once the handshake is complete (intricate details of which are still unclear to
> me), I check two things. The SSL suite that is being used and the "peer
> certificate" at both the client and server.  Since the client doesn't use one,
> the server correctly understands that. Similarly, the client correctly
> understands the certificate of the server.  I check the suite using the
> SSL_get_cipher()  function. It returns with   DES-CBC3-SHA
> 
> I am sure that  I am missing something very critical. Anyway...if creating a RSA
> key specifically with md5 returned with a success, why does the function return
> with SHA ?
> 
> Is there no way I can control the algorithm. Like why was DES-CBC3 automatically
> choosen ?
> 
> How can I track the actual handshake.. step-by-step.  The higher level functions
> are nice.. but is there any way I could
> get a tap into them and track the actual handshake ???
> 
> I have a whole bunch of other questions.. but I would appreciate help on the
> ones bothering me right now..
> 
> regards....
> 
> Kaul.
> 
> 
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    [EMAIL PROTECTED]
> Automated List Manager                           [EMAIL PROTECTED]
> 

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to