RE: I'm confused on the big picture. Help?-------=========--------}}}}}}}}

2002-05-15 Thread Jeff Woods
Hi, John. I haven't (yet) gotten Eric Rescorla's book that others have recommended, but understand it's very good. Although somewhat dated, _Applied_Cryptography_ by Bruce Schneier (ISBN 0-471-11709-9) has a lot of useful background on the protocols and has been helpful to me. However, I found

RE: acknowledgement requirement

2002-05-15 Thread John Jones
Funny request, Jim.  You're coming to a swimming class, sitting down beside the students, and then asking them to teach you to swim.   Go to openssl.org, and look at the FAQ's there.  Even if you got a lot of replies, you really wouldn't want to take our recollections as law on an issue lik

Re: [openssl-users] I'm confused on the big picture. Help?-------=========--------}}}}}}}}

2002-05-15 Thread Eric Rescorla
Chris Cleeland <[EMAIL PROTECTED]> writes: > On Wed, 15 May 2002, John Jones wrote: > > > Please help me get my facts straight on what this is all about. > > > > What I want to do: > > Send an XML string from a non-browser client to a server, but securely, because it >will contain credit card i

Re: p7-signedData : ordering authenticatedAttributes (or not).

2002-05-15 Thread Vadim Fedukovich
On Wed, 15 May 2002, FRISCH Laurent FTRD/DTL/ISS wrote: > Something bothers me with the authenticatedAttributes field in PKCS#7. It is > defined in SignerInfo by "authenticatedAttributes [0] IMPLICIT Attributes", > Attributes being a "SET OF attributes". This means that you should order > attribu

Re: [openssl-users] I'm confused on the big picture.Help?-------=========--------}}}}}}}}

2002-05-15 Thread Chris Cleeland
On Wed, 15 May 2002, John Jones wrote: > Please help me get my facts straight on what this is all about. > > What I want to do: > Send an XML string from a non-browser client to a server, but securely, because it >will contain credit card information and other personal junk. > It has to be on t

Re: I'm confused on the big picture. Help?-------=========--------}}}}}}}}

2002-05-15 Thread Rich Salz
OpenSSL interoperates with whatever SSL IIS has. You need to read about configuring IIS and its SSL stuff; Microsoft docs, not OpenSSL docs. You might find it easiest to pay someone (like Verisign) to sign the cert that you will have IIS generate. It will take you less time to do that, tha

I'm confused on the big picture. Help?-------=========--------}}}}}}}}

2002-05-15 Thread John Jones
Please help me get my facts straight on what this is all about. What I want to do: Send an XML string from a non-browser client to a server, but securely, because it will contain credit card information and other personal junk. It has to be on the Mac and Windows platforms at least. Steps I see