Re: SSL for telnet

2001-09-12 Thread Christoph Martin
Dilkie, Lee [EMAIL PROTECTED] writes: I've been trying to find telnet-ssl client and server code. Does anybody know of any current implementations? The few I've run across are all built on old SSLeay. If someone could throw me a few url's I'd be grateful... There is a patch to

Re: Split private Key

2001-09-12 Thread Michael Sierchio
matt wrote: Use dd(1). Say the key is 1000B: $ dd if=key.file of=key.file.1 bs=300 count=1 $ dd if=key.file of=key.file.2 bs=300 skip=1 count=1 $ dd if=key.file of=key.file.3 bs=300 skip=2 This reveals key bits to the holders, however. Using a K-of-N threshold scheme, or even a simple

Re: Split private Key

2001-09-12 Thread Clayton Haapala
On Wed, Sep 12, 2001 at 06:06:45AM -0700, Michael Sierchio wrote: matt wrote: Use dd(1). Say the key is 1000B: $ dd if=key.file of=key.file.1 bs=300 count=1 $ dd if=key.file of=key.file.2 bs=300 skip=1 count=1 $ dd if=key.file of=key.file.3 bs=300 skip=2 This reveals key bits

Generate a pem format key from a windows NT 4.0 system

2001-09-12 Thread Jeffrey S Smith
Do you have any idea how to turn a certificate from an NT 4.0 system into a PEM format? Thanks jeff smith

Re: CRL handling in OpenSSL?

2001-09-12 Thread Dr S N Henson
Antti Karttunen wrote: Does OpenSSL support now certificate revocation lists (CRLs), and to what extent? For me, it is just enough to check, whether a certificate is included in the list of revoked certificates (i.e. if it is on the CRL issued by its respective CA). Simple CRL checking

Re: Generate a pem format key from a windows NT 4.0 system

2001-09-12 Thread Mehmet Musa
Seclect your certificate and then export it to base64 format. --Mehmet On Sep 12, 11:45am, Jeffrey S Smith wrote: Subject: Generate a pem format key from a windows NT 4.0 system Do you have any idea how to turn a certificate from an NT 4.0 system into a PEM format? Thanks jeff smith [

Re: Certificate Encoding

2001-09-12 Thread Dr S N Henson
MAHAPATRA,ARIJIT (A-India,ex1) wrote: Hi, Can anyone tell me what is the Certificate Encoding type of the certificates(.pem) generated by OpenSSL ? Is this PKCS #7 wrapped X.509 certificate ? As documented PEM is the DER encoded certificate base64 encoded with header and footer lines.

Re: Split private Key

2001-09-12 Thread Michael Sierchio
Clayton Haapala wrote: Why not encrypt the Certificate key, prior to splitting it Encrypt the public key? Does not compute. Encryption is also not the same as splitting -- splitting is one way to ensure that more than N principals must act in concert to sign something -- and that signature

Undocumented OpenSSL functions

2001-09-12 Thread Nebi Musa
I would be very grateful if someone will explain even a few ofthe following functions: SSL_CTX_ctrl SSL_CTX_get_app_data SSL_CTX_get_cert_store SSL_CTX_get_client_cert_cb SSL_CTX_sess_accept SSL_CTX_set_cert_verify_cb SSL_CTX_set_client_CA_list SSL_CTX_set_client_cert_cb

YinCD.com - CD Printing

2001-09-12 Thread YinCD.com
ÄúºÃ,Õâ·âÐÅÈç¹û¶ÔÄúûÓÐÓô¦´òÈÅÁË Çëɾ³ý. === http://www.yincd.com email:[EMAIL PROTECTED] [EMAIL PROTECTED] === µ±ÄãΪ¿Í»§ÌṩһÕÅÄÜÈÃÄã׬ºÜ¶àÇ®µÄ¹âÅ̵Äʱºò, ÓÐûÓÐÏë¹ýÔÚ¹âÅ̱³ÃæÓ¡ÉÏ×Ô¼ºµÄ¹«Ë¾µÄ»Õ±ê,

Re: Split private Key

2001-09-12 Thread Stefan Bellon
Michael Sierchio [EMAIL PROTECTED] wrote: matt wrote: Use dd(1). Say the key is 1000B: $ dd if=key.file of=key.file.1 bs=300 count=1 $ dd if=key.file of=key.file.2 bs=300 skip=1 count=1 $ dd if=key.file of=key.file.3 bs=300 skip=2 This reveals key bits to the holders, however.

Re: Split private Key

2001-09-12 Thread Clayton Haapala
On Wed, Sep 12, 2001 at 08:12:39AM -0700, Michael Sierchio wrote: Clayton Haapala wrote: Why not encrypt the Certificate key, prior to splitting it Encrypt the public key? Does not compute. I wrote a bit more than THAT -- I said to use a separate public key to encrypt (protect) the

Remove

2001-09-12 Thread Paul_Haigh
- Forwarded by Paul Haigh/BVT/IDX1 on 09/12/01 02:43 PM - Dale Peakall

Off-topic: Anyone with Bull SmartTLP3 on Win2K?

2001-09-12 Thread Sebastian Paul Avarvarei
Hello, Sorry for being off-topic, but did anyone on this list managed to use a Bull SmartTLP3 smartcard reader on Win2K? I installed the Bull drivers (with their installation software) and the MS libraries (smclib.exe, scbase.exe, scbaseu2.exe). However, the Device Manager say that the

Re: Split private Key

2001-09-12 Thread Michael Sierchio
Stefan Bellon wrote: For this, you may want to take a look at http://www.erikyyy.de/multikey/ Right, that's one possible solution. Another is to use an algebraic threshold scheme. For example, you can support M-of-N threshold schemes with 2 = M = N with N up to 15 if you compute over GF(2^4)

openssh on Solaris 8

2001-09-12 Thread tsweeney
I have installed openssh-2.9p2 -with gcc-3.01. and openssl-0.9.6b The packages (from Sunfreeware.com) installed fine, but when trying to run sshd the error returned is could not load key I ran ssh-keygen and the path and filenames are correct in the sshd_config file. Permissions are read only

Majordomo results: Remove

2001-09-12 Thread Majordomo
-- - Forwarded by Paul Haigh/BVT/IDX1 on 09/12/01 02:43 PM - END OF COMMANDS __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED]

Crypt::SSLeay - problems connecting to 128 bit sites (not 56bit sites) Solaris 2.7 and openssl .96b, latest version of Crypt::SSLeay

2001-09-12 Thread George Richman
Support, Does Crypt::SSLeay support 128 bit encrypted sites?? When I use lwp-request https://login.zeborg.com , it does not connect properly. I get a: HTML HEADTITLEAn Error Occurred/TITLE/HEAD BODY H1An Error Occurred/H1 500 read failed: /BODY /HTML Then when I try it against a lower bit

Re: openssh on Solaris 8

2001-09-12 Thread Yozo TODA
I have installed openssh-2.9p2 -with gcc-3.01. and openssl-0.9.6b you should use OpenSSH mailing list. see (http://www.openssh.com/). PS: I'm using openssh-2.9p2 on Solaris8/sparc, compiled with openssl-0.9.6b using gcc-2.95.3 (gcc from companion CD). it works well. The packages (from