Re: OpenSSL usage liability, RHSWS, and toothbrushes

1999-11-22 Thread Terrell Larson
Sorry folks. The legal issues are %100 percent accuarate. He is on the mark, and its better that we listen than we challenge On Mon, 22 Nov 1999 09:45:51 -0600, Leland V. Lammert wrote: >Jeeze, boobie! Lighten UP!! There have been no court cases on the issue (are you a >lawyer or a judge??)

Re: Certificate question

1999-11-22 Thread Michael Robinson
Geoff Thorpe <[EMAIL PROTECTED]> writes: >Modern operating systems generally make memory >scanning a lot more difficult in a process that has setuid()'d from root >to something else. Apache's setuid prevents core-dumping. Ok, forget gcore. Use ptrace. From the FreeBSD ptrace docs: "This requ

Suggestion:modify Malloc functions defined in crypto.h

1999-11-22 Thread jackie
In crypto.h, Malloc,Realloc are defined as Macros. When I use OpenSSL for windows application. the definitions are conflicting with one MSVC header file, objidl.h. I suggest that the section in crypto.h should be modify: from #if defined(WIN32) || defined(MFUNC) #define Malloc CRYPTO_malloc #de

The "transport layer" of openssl

1999-11-22 Thread jackie
For some reasons I will use other transport protocol but not TCP. Can I just write a new kind of BIO and set them into the "SSL"structure, (that is, SSL->rbio and SSL->wbio,SSL->bbio)and hope all openSSL functions will work fine? Before I start to write this new BIO, I should know what BIO interf

Re: Internal CA & Generating my own Certificates

1999-11-22 Thread Mark D. Baushke
> Date: Mon, 22 Nov 1999 09:29:55 -0500 (EST) > From: Adam Sherman <[EMAIL PROTECTED]> > > I want to setup an Internal CA and generate my own server & client > certificates. However, I haven't found any documentation on what is > involved or the exect syntax needed. I believe that the document <

Re: Internal CA & Generating my own Certificates

1999-11-22 Thread Seetharama Sarma Ayyadevara
hi Look at http://www.ultranet.com/~fhirsch/Papers/wwwj/ This might help you sarma Adam Sherman wrote: > I want to setup an Internal CA and generate my own server & client > certificates. However, I haven't found any documentation on what is > involved or the exect syntax needed. > > Please

Re: Internal CA & Generating my own Certificates

1999-11-22 Thread Leland V. Lammert
At 08:29 AM 11/22/99 , Adam Sherman wrote: >I want to setup an Internal CA and generate my own server & client >certificates. However, I haven't found any documentation on what is >involved or the exect syntax needed. > >Please send any infomation on the above, > >Thank You, > >A. www.openca.org

RE: SSL and non-repudiation

1999-11-22 Thread Rene G. Eberhard
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Maurice klein > Gebbinck > Sent: Monday, November 22, 1999 12:20 PM > To: [EMAIL PROTECTED] > Subject: SSL and non-repudiation > > > Hi all, > > This weekend I read the SSL spec and I am wondering

Open SSL 0.9.4 Compiling Problem under Linux ** Help needed **

1999-11-22 Thread Michael Packer
I'm trying to compile openssl 0.9.4 under slackware linux dist and get errors obj_dat.c NUM_NID, NUM_OBJ, NUM_LN and NUM_SN are undeclared. would appreciate any help possible thanks Michael Packer -- Michael Packer -- Stingray Powerboats -- http://www.stingrayboats.com In October I made jus

Re: Import Cert in IE5 with special shown name

1999-11-22 Thread Gilles MASSEN
Hi. As you are working with IE, I wondered if you know a way to import certificates of other users. Actually I'm looking for any way to import certificates of other users into IE. Are you aware of any way to do this? Thanks for any help! Actually I'm sorry not to be able to help you on your pro

Re: OpenSSL usage liability, RHSWS, and toothbrushes

1999-11-22 Thread Dave Neuer
With all due respect, Lee, I have not given any legal advice on the list except a little "word of caution". RSADSI has certainly sued people for infringement of the of their patents; though maybe not simple users of RSA. It seems to me that you are the one on the list giving legal advice, namely

Beginner Question: How do I create a certificate?

1999-11-22 Thread Bernardo Santos Wernesback
Hi All, I have just started using OpenCA yesterday and so far I have been unable to create a certificate. I am trying to create a certificate for a IIS server although I am running OpenCA on a Linux workstation. Is this possible? I thought my machine had a lot of trash in it so I have rei

Good Algorithm

1999-11-22 Thread Sean Walker
What is a good suggestion for an algorithm in SSL that I can use that doesn't have the patent problems here in the US? I am writing the software for both client and server, so I can be quite flexible here. Actually, I just got everything done today and had a successful connection just a few minute

Re: SSL and non-repudiation

1999-11-22 Thread Eric Rescorla
> This weekend I read the SSL spec and I am wondering about the following. > Suppose I am a the owner of an e-shop and I have a secure webserver. In > order to make sure that all product orders I get are for real, I require > that clients present a valid certificate during the SSL handshake. > How

Re: openssl 0.9.4 on HP-UX 10.20

1999-11-22 Thread Lutz Jaenicke
On Mon, Nov 22, 1999 at 02:48:42PM +0100, Klaus-Dieter Wirth wrote: > I'm using the crypto library of openssl 0.9.4 on HP-UX 10.20. I've got > things running with "hpux10-brokencc" configuration, i.e. compile with > HP's cc. When I build my own program with cc and link it with > libcrypto.a, it wo

Re: Certificate question

1999-11-22 Thread Geoff Thorpe
Hi, On Mon, 22 Nov 1999, Michael Robinson wrote: > Everyone says that, but I've never seen anyone elucidate on the so-called > "obvious" reasons. > > The key file is protected by root-read-only permissions. Only someone with > root access can read the file. If someone has root access, they ca

Re: OpenSSL usage liability, RHSWS, and toothbrushes

1999-11-22 Thread Leland V. Lammert
Jeeze, boobie! Lighten UP!! There have been no court cases on the issue (are you a lawyer or a judge??), .. and your analogy to piece parts is invalid. Quit giving bogus legal advice! Lee At 09:39 AM 11/18/99 , you wrote: >-Original Message- >From: Leland V. Lammert <[EMAIL PR

Trusted Cert

1999-11-22 Thread Joe Schiavone
How can I make my Netscape.p12 certificate a "Trusted Certificate"? I assume that by the term "Trusted" that the certificate no longer needs to be authenticated by a Registration Authority Certificate??? -

ANNOUNCE: SafeGossip first beta

1999-11-22 Thread Pete Chown
At long last, here is the first beta release of SafeGossip, which implements the new RFCs and Internet drafts for telnet, FTP, IMAP, POP and SMTP over TLS. Here are some of the new features: * Telnet support is now implemented according to the Internet draft. * You can now configure SafeGossip u

Internal CA & Generating my own Certificates

1999-11-22 Thread Adam Sherman
I want to setup an Internal CA and generate my own server & client certificates. However, I haven't found any documentation on what is involved or the exect syntax needed. Please send any infomation on the above, Thank You, A. -- Technical Architect mailto:[EMAIL PROTECTED] ePALS Classroom E

RE: openssl inside linux kernel

1999-11-22 Thread Jeffrey Altman
> > From: jackie [mailto:[EMAIL PROTECTED]] > > Sent: Monday, November 22, 1999 8:30 AM > > To: [EMAIL PROTECTED] > > Subject: Re: openssl inside linux kernel > > > > > > I would like to regard "SSL in kernel" as accessing SSL functions > > through normal socket API. such as the SSL that Microsoft

openssl 0.9.4 on HP-UX 10.20

1999-11-22 Thread Klaus-Dieter Wirth
Hello, I'm using the crypto library of openssl 0.9.4 on HP-UX 10.20. I've got things running with "hpux10-brokencc" configuration, i.e. compile with HP's cc. When I build my own program with cc and link it with libcrypto.a, it works really fine. Because of other reasons I have to use HP's CC (C+

Re: OpenSSL and Mac OS and export fun

1999-11-22 Thread Mark H. Wood
On Sat, 20 Nov 1999, Wilfredo Sanchez wrote: > Dr Stephen Henson <[EMAIL PROTECTED]>: > | I'm no expert but what you are suggesting sounds like "crypto with a > | hole" which has been asked about before and people have been told its > | illegal. > > I'm aware of this rumor, though I've never

Re: SSL and non-repudiation

1999-11-22 Thread Ben Laurie
Maurice klein Gebbinck wrote: > > Hi all, > > This weekend I read the SSL spec and I am wondering about the following. > Suppose I am a the owner of an e-shop and I have a secure webserver. In > order to make sure that all product orders I get are for real, I require > that clients present a val

RE: openssl inside linux kernel

1999-11-22 Thread dimrub
> From: jackie [mailto:[EMAIL PROTECTED]] > Sent: Monday, November 22, 1999 8:30 AM > To: [EMAIL PROTECTED] > Subject: Re: openssl inside linux kernel > > > I would like to regard "SSL in kernel" as accessing SSL functions > through normal socket API. such as the SSL that Microsoft > offered in wi

Import Cert in IE5 with special shown name

1999-11-22 Thread Koppmann Martin
I'm importing signed Certs with a generated html page including vbscipt with the pkcs7 object. That works fine. In MS IE5 it is possible to give the cert a special name. In the German Version it is called "Angezeigter Name" (shown name). I know, this normally editable by the user. But does anyb

SSL and non-repudiation

1999-11-22 Thread Maurice klein Gebbinck
Hi all, This weekend I read the SSL spec and I am wondering about the following. Suppose I am a the owner of an e-shop and I have a secure webserver. In order to make sure that all product orders I get are for real, I require that clients present a valid certificate during the SSL handshake. Howe

Re: Certificate question

1999-11-22 Thread Ben Laurie
Michael Robinson wrote: > > Patrik Carlsson <[EMAIL PROTECTED]> writes: > >You could remove your key passphrase - but it's not recommended for obvious > >security reasons! > > Everyone says that, but I've never seen anyone elucidate on the so-called > "obvious" reasons. > > The key file is prot

[Q] How to configure multiple CA and certs in s_client example

1999-11-22 Thread 권재환
When I connect to specific server using specific CA and cert, I can use -CApath, -CAfile, -cert option of the s_client program. Howerver when connectiong to the various servers, We can not determine what CAs the server trusts before receiving "certific

Re: openssl inside linux kernel

1999-11-22 Thread Ben Laurie
Seetharama Sarma Ayyadevara wrote: > > hi > > There are crypto accelrator cards that can do crypto on them, freeing the > CPU. This requires copying of date to/from user space. To avoid this and to > improve speed I thought openssl inside the kernel will help. That is why I > posted the que

problem for installing coldfusion + apache 1.3.9 + mod_ssl + opensssl

1999-11-22 Thread ArieTibi
  Hi, I have a problem for installing coldfusion + apache 1.3.9 + mod_ssl + opensssl It's ok to run httpsd but there is a problem with EAPI and I can't run coldfusion...(can't load module coldfusion in httpd.conf) I tried to proceed in the same order than like for mod_php or mod_perl. The d