Re: SSL 3.0 / 3.1 negotiation

1999-01-19 Thread Ben Laurie
Roland Mechler wrote: > > I posted this to openssl-dev and haven't got a response, so, I dunno, maybe this > list is more appropriate. It was in my queue! > This is actually something I came across with SSLeay 0.9.0b, but the relevant > code for OpenSSL 0.9.1c appears to be the same. The server

Re: Try to generate a 40 bits key... getting an ssleay error...

1999-01-19 Thread Bernard Leach
kbg wrote: > > Hy, > > I'm trying to generate a 40 key to be used with an ssl-apache server > (due to country limitations). > > I've tried many things to generate it... > ssleay genrsa -rand rand.dat -des 40 > server.key > gives me a server.key file that looks nice, but doing > ssleay req -new

Re: Try to generate a 40 bits key... getting an ssleay error...

1999-01-19 Thread Ben Laurie
Rodney Thayer wrote: > meta question... is there/should there be an openssl faq? Dunno if there is, but there certainly should be! Cheers, Ben. -- http://www.apache-ssl.org/ben.html "My grandfather once told me that there are two kinds of people: those who work and those who take the credit.

SSL 3.0 / 3.1 negotiation

1999-01-19 Thread Roland Mechler
I posted this to openssl-dev and haven't got a response, so, I dunno, maybe this list is more appropriate. This is actually something I came across with SSLeay 0.9.0b, but the relevant code for OpenSSL 0.9.1c appears to be the same. The server code, when using the v23 method, uses the version in

Re: Try to generate a 40 bits key... getting an ssleay error...

1999-01-19 Thread Rodney Thayer
you need to make your cert key 512 bits and make sure the cipher set is set up to use 40 bit rc4 for symmetric keys. that's in the cipher selection stuff, you don't do it with genrsa. someone who's a current apache user should explain this... meta question... is there/should there be an openssl

Secure news server?

1999-01-19 Thread Larry Mulcahy
Followup to my previous message, I am checking out SSLwrap: http://www.rickk.com/sslwrap/ stunnel: http://mike.daewoo.com.pl/computer/stunnel/stunnel.html Also looking at DNEWSWEB (http://www.netwinsite.com/prices.htm) -- Larry Mulcahy[EMAIL PROTECTED]

Re: Try to generate a 40 bits key... getting an ssleay error...

1999-01-19 Thread Mark J Cox
> What country limitations? He is in France. > Yeah - don't try to use a 40 bit RSA key. That's far too small. If you > want to use 40-bit session keys, then restrict the ciphersuites you use. He has to limit his ciphersuite to only include things like EXP-RC4 and EXP-RC2 and use 512 bit RSA ke

Re: Try to generate a 40 bits key... getting an ssleay error...

1999-01-19 Thread Ben Laurie
kbg wrote: > > Hy, > > I'm trying to generate a 40 key to be used with an ssl-apache server > (due to country limitations). What country limitations? > > I've tried many things to generate it... > ssleay genrsa -rand rand.dat -des 40 > server.key > gives me a server.key file that looks nice,

Try to generate a 40 bits key... getting an ssleay error...

1999-01-19 Thread kbg
Hy, I'm trying to generate a 40 key to be used with an ssl-apache server (due to country limitations). I've tried many things to generate it... ssleay genrsa -rand rand.dat -des 40 > server.key gives me a server.key file that looks nice, but doing ssleay req -new -key server.key -out server.csr

Secure news server?

1999-01-19 Thread Larry Mulcahy
My question is: Is there any way to set up a secure news server using INN plus OpenSSL or SSLeay? -- Larry Mulcahy[EMAIL PROTECTED] http://babylon5.spaceimaging.com/ __ OpenSSL Proj

What happened to Eric Young and Tim Hudson

1999-01-19 Thread Janus Liebregts
FYI, In short: Eric and Tim joined RSA and ported the SSLeay to BSAFE SSL-C a commercially product. The Wassenaar agreement has one opening: The Lists do not control "software" which is "In the public domain". That leaves the OpenSSL-platform as _the_ platform to build on. regards and succes wit