Re: Question

2000-01-08 Thread Leland V. Lammert

At 04:14 PM 1/8/00 , you wrote:
>Hi everyone,
>
>My name is Jaime.  I recently installed apache-mod_ssl 1.3.9.4.9-0.6.0
>and openssl 9.4.1.  I have read on the openssl documentation that it is illegal
>to run ssl here in the US.  Well, can anyone shed more light into this issue?
>
>-Jaime

Jaime,

It is not *illegal* (criminal) to run openssl in the US, but a violation of the RSA 
patents - which is a civil issue. If you use openssl (or one of the other public 
domain products), RSA has the right to ask you to cease and desist based on their 
patent. If you continue to use it after being asked to cease and desist, RSA may also 
be able to win a court case for damages.

If you are worried about that, you can purchase one of the commercial flavors - 
Stronghold or RedHad Secure Server.

 Lee

Leland V. Lammert[EMAIL PROTECTED]
   Chief Scientist Omnitec Corporation
   Network/Internet Consultants  www.omnitec.net

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: cipher BIO bug

2000-01-08 Thread Dr Stephen Henson

Andrew Pimlott wrote:
> 
> The cipher BIO has a nasty bug that can cause some of the final eight
> bytes to be lost during decryption.  It may affect other BIO's.  I'm
> using openssl 0.9.4.
> 

Thanks for the report but this bug has been reported before and should
already be fixed in the development release.

Steve.
-- 
Dr Stephen N. Henson.   http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED] 
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the   OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Question

2000-01-08 Thread Jaime Perez

Hi everyone,

My name is Jaime.  I recently installed apache-mod_ssl 1.3.9.4.9-0.6.0
and openssl 9.4.1.  I have read on the openssl documentation that it is illegal
to run ssl here in the US.  Well, can anyone shed more light into this issue?

-Jaime

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]