Re: Checking SSL3 compliance

2000-11-30 Thread Lutz Jaenicke

On Thu, Nov 30, 2000 at 11:02:44AM -0800, Hegde, Ramdas wrote:
> Is there some utility out there which verifies if your application is
> following the SSL3 specification in terms of Ciphers/Handshakes etc? The
> intent is to verify that two applications are actually talking SSL3 without
> digging into the application code.

I am not completely sure that I understood your request correctly.
You might try Eric Rescorla's ssldump tool. If it can analyze your
communication, the protocol should be correct.
   http://www.rtfm.com/ssldump/

Best regards,
Lutz
-- 
Lutz Jaenicke [EMAIL PROTECTED]
BTU Cottbus   http://www.aet.TU-Cottbus.DE/personen/jaenicke/
Lehrstuhl Allgemeine Elektrotechnik  Tel. +49 355 69-4129
Universitaetsplatz 3-4, D-03044 Cottbus  Fax. +49 355 69-4153
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Checking SSL3 compliance

2000-11-30 Thread Hegde, Ramdas

Hi

Is there some utility out there which verifies if your application is
following the SSL3 specification in terms of Ciphers/Handshakes etc? The
intent is to verify that two applications are actually talking SSL3 without
digging into the application code.

Thanks

ramdas
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]