Re: Decrypting SSL packets with openSSL

2003-11-09 Thread Jason Haar
On Fri, 2003-11-07 at 21:45, Lutz Jaenicke wrote: > When you are using s_client, you will most likely negotiate an EDH cipher > that cannot be decrypted with ssldump. Use > openssl -s_client -ciphers RC4-MD5 ... > to generate "decryptable" sessions... Ah - thank you - that makes total sense (and

Re: Compiance with Browser Requirements

2003-11-09 Thread Rich Salz
> Browsers require that ssl certificates have the same name as the server > from which they come. That's an https protocol requirement, not a browser requirement (well, at least not directly.) > I believe this name of the certificate is the > "common name" requested in the certificate set-up. Is

Compiance with Browser Requirements

2003-11-09 Thread Ken Loomis
Hello: Browsers require that ssl certificates have the same name as the server from which they come. I believe this name of the certificate is the "common name" requested in the certificate set-up. Is this correct? Is the file name of the certificate irrelevant? Thanks, Ken ___

Re: crlDistributionPoints with DirName value?

2003-11-09 Thread Dr. Stephen Henson
On Thu, Nov 06, 2003, Mike Acar wrote: > > I'll answer several messages at once in this mail. > > Nils Larsch <[EMAIL PROTECTED]> wrote: > > > Try: > > > > [EMAIL PROTECTED] > > > > [dist_point] > > dirName=dir_name > > > > [dir_name] > > C=FI > > O=SSH Communications Security Corp > > CN=SS

installation problems

2003-11-09 Thread leila aghaei
Hi;I want to install fssl & it need to download & install openssl.I have 2 question & I want to help me?1.I read readme file for installation of fssl 2.1.0 & I read that fssl for c++ requires openssl 0.9.6c.could I download & use latest version of openssl?2.I read install.w32 file for installation

Distinguish between regular and engine loaded private key

2003-11-09 Thread Markus Lorch
All, I have the need to distinguish between a private key loaded regularly with openssl and one that is loaded by an engine (hw_pkcs11 trustway engine). It will always be an rsa key. I looked a bit at the definition of rsa_st and found that there is an engine pointer in there. Should this pointe