Re: Intermediate CA Revocation?

2001-01-28 Thread Maxime Dubois
Hi Still no reply, maybe the answer is obvious, but I don't know it and I need it, so please could you help me? Any ideas? Thanks. Maxime     Hi all, I want to create a CA chain, and I have some questions about it: 1. How can I revoke an intermediate CA? Is It Possible? 2. Is there a list/index o

Re: ASN1 bug and CRL verify problems

2001-01-28 Thread Dr S N Henson
Per Mützell wrote: > > We have problems with CRL verification in Openssl 0.9.6 . > The problem is identified as related to a bug in the current ASN1-module. > ( See attached message from openssl-dev list. ) > The CA that we use genererates CRLs that adds OPTIONAL, SEQUENCE OF and/or > SET OF ite

Re: DSA Keys and Sigs

2001-01-28 Thread Dr S N Henson
jharris wrote: > > Im trying to write a small utiltiy to allow me to sign files, and check > the sigs at a later time. Really it should be incorperated in a larger > application. > > OK, Im having alot of trouble using DSA sigs and keys. The man pages seem > to be very incomplete. After many

Re: SSLv2 versus SSLv3

2001-01-28 Thread Dr S N Henson
Matt Henderson wrote: > > I have been using openssl 0.9.6 under windows and have found some > behaviour that I find curious. When I change the suite from V2 to V3 I > am getting an enormous performance hit. > > SSL_METHOD * pMethod = SSLv2_client_method(); > > SSL connection using : RC4-MD5

SSLv2 versus SSLv3

2001-01-28 Thread Matt Henderson
I have been using openssl 0.9.6 under windows and have found some behaviour that I find curious. When I change the suite from V2 to V3 I am getting an enormous performance hit. SSL_METHOD * pMethod = SSLv2_client_method(); SSL connection using : RC4-MD5 Peer name SSLeay demo server 2113863 byte