Re: Does SSL have "No encryption" option?

2002-08-17 Thread Max Blackmer

I too am interested in this subject. perhaps I do not want encryption 
but I do want authenticated information through SSL.  Is it possable to 
have only the key passed via encryption. Then only useing hash methods 
to hash the key + data transmitted and send the data unencrypted but 
give it an authentication that it is not spoofed? This could be usefull 
if the data was already encrypted or I just want to make sure I am 
getting valad data from a source without encryption overhead.

Jacobson Erik P Civ AFRL/IFGC wrote:

>The easiest way would be to move HTTP from port 80 to your HTTPS port.  SSL
>without encryption wouldn't be SSL.  Unless you just want the key
>authentication and leave the data unencrypted?
>
> >-Original Message-
> >From: Denslow, Gregory E (Greg) [mailto:[EMAIL PROTECTED]]
> >Sent: Friday, August 16, 2002 12:11 PM
> >To: [EMAIL PROTECTED]
> >Subject: Does SSL have "No encryption" option?
> >
> >
> >Had an internal request to provide https connectivity 
> >"without encryption".
> >Is this a valid option? Will OpenSSL allow the negotiation of 
> >this if client
> >or server requests it?
>__
>OpenSSL Project http://www.openssl.org
>User Support Mailing List[EMAIL PROTECTED]
>Automated List Manager   [EMAIL PROTECTED]
>


__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



RE: Does SSL have "No encryption" option?

2002-08-16 Thread Jacobson Erik P Civ AFRL/IFGC

The easiest way would be to move HTTP from port 80 to your HTTPS port.  SSL
without encryption wouldn't be SSL.  Unless you just want the key
authentication and leave the data unencrypted?

 >-Original Message-
 >From: Denslow, Gregory E (Greg) [mailto:[EMAIL PROTECTED]]
 >Sent: Friday, August 16, 2002 12:11 PM
 >To: [EMAIL PROTECTED]
 >Subject: Does SSL have "No encryption" option?
 >
 >
 >Had an internal request to provide https connectivity 
 >"without encryption".
 >Is this a valid option? Will OpenSSL allow the negotiation of 
 >this if client
 >or server requests it?
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Does SSL have "No encryption" option?

2002-08-16 Thread Dr. Stephen Henson

On Fri, Aug 16, 2002, Denslow, Gregory E (Greg) wrote:

> Had an internal request to provide https connectivity "without encryption".
> Is this a valid option? Will OpenSSL allow the negotiation of this if client
> or server requests it?

Yes this is supported but the relevant ciphersuites have to be
specifically enabled. See the "ciphers" manual page.

Steve.
--
Dr. Stephen Henson  [EMAIL PROTECTED]
OpenSSL Project http://www.openssl.org/~steve/
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Does SSL have "No encryption" option?

2002-08-16 Thread Denslow, Gregory E (Greg)

Had an internal request to provide https connectivity "without encryption".
Is this a valid option? Will OpenSSL allow the negotiation of this if client
or server requests it?
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]