Re: ca/cert key gen?

1999-12-02 Thread dreamwvr
hi, would be interested as well so please let me know Skye when you do locate the info. a few years ago i pursued this to no end result.. if the raw equipment is hand i would be more than happy to assist.. Regards,

Buffer overflow in RSAREF2, Security Advisory (CORE SDI)

1999-12-02 Thread Vin McLellan
A report of a buffer overrun in RSAREF v.2 was posted to Bugtraq, 12/1/99, by Gerardo Richarte [EMAIL PROTECTED] Core SDI (Seguridad de la Informacion), of Buenos Aires, moderates the Spanish language version of BugTraq. Last year, Core SDI discovered a vulnerability in SSH (up

Re: OpenSSL 0.9.4 bug on HP-UX 11?

1999-12-02 Thread Karsten Spang
Bernd Nies wrote: I tried to compile OpenSSL 0.9.4 under HP-UX 11.00 on a 64bit PA-RISC 2.0 architecture (R class server). Compiler: gcc 2.95.2 It compiled without errors and warnings but when testing it with "make test" the test aborts at the BN (big number) test. I installed it, hoping

Re: OpenSSL 0.9.4 bug on HP-UX 11?

1999-12-02 Thread Bernd Nies
Ulf Möller wrote: It compiled without errors and warnings but when testing it with "make test" the test aborts at the BN (big number) test. I installed it, hoping that it would work anyway. That error might also come from problems with bc, but in your case it looks like the bignum

Re: RSA Security and Red Hat, Inc. Sign Licensing Agreement

1999-12-02 Thread Andrew Cooke
EKR wrote: Andrew Cooke [EMAIL PROTECTED] writes: EKR wrote: Andrew Cooke [EMAIL PROTECTED] writes: Nicolas Roumiantzeff wrote: Does anybody know why both IE and Netscape browser implement exclusively RSA certificates? I have no idea, but one reason might be the need for

Introduction?

1999-12-02 Thread Jochen Pfaadt
Does anybody know a URL or book with an easy to follow introduction to establishing secured connections? (something like '... for dummies' or so) __ OpenSSL Project http://www.openssl.org User

sslified imap server

1999-12-02 Thread Kristian Köhntopp
Thanks to Ethereal (http://www.freshmeat.net/appindex/1998/07/14/900471369.html) I am now able to show all these precious passwords to management and can easily convince them to use encrypted protocols. Now, where do I find a free SSLified IMAP server, please? ;-) Kristian -- Kristian

SSL/TLS Security (FW - Tom Weinstein)

1999-12-02 Thread Vin McLellan
Date: Mon, 29 Nov 1999 14:11:47 -0800 From: Tom Weinstein [EMAIL PROTECTED] Organization: Geocast Network Systems Sender: [EMAIL PROTECTED] Jaroslav Pinkava wrote: Where can I get the last informations about present SSL security status? I seek more detailed information than contented in the

Intallation problems with openssl-0.9.4

1999-12-02 Thread Jan Sandorf
Hi, I have some weird problems with my installation of openssl I'm trying to install this on a SunOS 5.6 Generic_105181-07 sun4u sparc SUNW,Ultra-2 And I just can't get it to work. Is there anyone out there who has any idea of what this can be? Cheers, -Jan - gcc

RE: sslified imap server

1999-12-02 Thread GOMEZ Henri
You could try to use jonama as a ssl relay www.multimania.com/jonama/ - Henri Gomez ___[_] EMAIL : [EMAIL PROTECTED] (. .) PGP KEY : 4912D659...oOOo..(_)..oOOo... PGP Fingerprint : 8CAD0D50356DA7E45C540B010FFE39E8

Re: sslified imap server

1999-12-02 Thread Erwann ABALEA
On Thu, 2 Dec 1999, Kristian Köhntopp wrote: Thanks to Ethereal (http://www.freshmeat.net/appindex/1998/07/14/900471369.html) I am now able to show all these precious passwords to management and can easily convince them to use encrypted protocols. Now, where do I find a free SSLified IMAP

https redirect problem.

1999-12-02 Thread biyong
hi, I am using apache1.3.9+ openssl0.9.4 . everything seems working fine. only one thing. when I want to redirect frome one page to another in the same httpsd . it will try to find the page use http instead of https. so the redirect always fail. what's the problem? anyone got this kind of

Re: SSL/TLS Security (FW - Tom Weinstein)

1999-12-02 Thread Andrew Cooke
Vin McLellan wrote: Date: Mon, 29 Nov 1999 14:11:47 -0800 From: Tom Weinstein [EMAIL PROTECTED] Organization: Geocast Network Systems Sender: [EMAIL PROTECTED] Jaroslav Pinkava wrote: Where can I get the last informations about present SSL security status? I seek more detailed

Re: RSA Security and Red Hat, Inc. Sign Licensing Agreement

1999-12-02 Thread Tom Weinstein
Nicolas Roumiantzeff wrote: Does anybody know why both IE and Netscape browser implement exclusively RSA certificates? My feeling is that Microsoft and Netscape both made a deal with RSA Security to get a "low" price RSA license at the condition of not implementing DSA. As a matter of

Re: RSA Security and Red Hat, Inc. Sign Licensing Agreement

1999-12-02 Thread EKR
Andrew Cooke [EMAIL PROTECTED] writes: 1. The server's generation of its ephemeral DH key. 2. The server's DSA signature. 3. The client's generation of its ephemeral DH key. [snip] I've dug out the nearest I can get to what made me think random numbers were critical for DH key exchange

FW: Security Advisory: Buffer overflow in RSAREF2

1999-12-02 Thread Widow
This was posted to one of the other lists. Can the OpenSSL RSAREF interface code protect against this security hole in RSAREF, or does everyone really have to patch the RSAREF code itself? --- Begin included message --- -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 -

Re: sslified imap server

1999-12-02 Thread Pete Chown
Kristian Köhntopp wrote: Now, where do I find a free SSLified IMAP server, please? ;-) It depends if you want the old or new version of the protocol. The old version has a different port number for secured IMAP; the new one doesn't. If you want the new version, you could have a look at

Re: sslified imap server

1999-12-02 Thread Robert Forsman
Pete Chown [EMAIL PROTECTED] ,in message [EMAIL PROTECTED] kygate.co.uk, wrote: Kristian Köhntopp wrote: Now, where do I find a free SSLified IMAP server, please? ;-) It depends if you want the old or new version of the protocol. The old version has a different port number for