Re: X509_verify_cert(): verify with time and CRL

2004-10-07 Thread Goetz Babin-Ebell
Hello Steve, Dr. Stephen Henson wrote: On Wed, Sep 15, 2004, Goetz Babin-Ebell wrote: Dr. Stephen Henson wrote: On Tue, Sep 14, 2004, Goetz Babin-Ebell wrote: I still would propose the following logic: a) CRL is valid (regarding issuance time) if thisUpdate = checkTime and thisUpdate = now. b)

FIPS Build Failure

2004-10-07 Thread Matt Pauker
Hi, I just downloaded the latest 0.9.7 snapshot (openssl-0.9.7-stable-SNAP-20041007), and tried to build in FIPS mode, but it looks like the source got modified somehow: HMAC-SHA1(fips_sha_locl.h)= 61e5b59c8a43e21d2f022101852467a7176e52eb --- HMAC-SHA1(fips_sha_locl.h

I have a simple question

2004-10-07 Thread Eric Gold
Hi, I have a simple SSL question, I am at a beginner's level. If I want to do on-line banking from my office I am required to go through my linksys router to the banks website. Is there a security hole in my router becauseI wouldfirst establish an SSL connection to my router and thena

Re: I have a simple question

2004-10-07 Thread Kenneth Robinette
Eric We are not networking/security experts, but in general, you would not establish a session with your router. The router would simply pass the connection from your computer to the bank, where the connection would either be accepted or rejected. If accepted, it would start an SSL handshake