Re: Bleichenbacher attack?

2000-09-23 Thread Dan Kegel
Ulf Möller wrote: > > On Thu, Sep 21, 2000 at 03:09:06PM -0500, Ed Kubaitis wrote: > > > > How vulnerable is the current OpenSSL to the Bleichenbacher attack? > > > Must be old hat by now, but someone brought it up at work. > > > The source tree does not seem to contain the word 'bleichenbacher'

Re: Minor incompleteness in verify.c docs

2000-09-23 Thread Dr S N Henson
Lutz Jaenicke wrote: > > Hi! > > In verify.c there is an option "-trusted", which is not documented in > verify.pod. I am not sure that I understood all of the source of verify.c, > at least I did not understand what this option is good for :-) > Not much. It supplies a file of trusted certifi