RE: SSL and snail mail

> We are splitting the SSL connection over our network and thus break > this thing. :( > > thanks and regards > -Krishna Split SSL is not SSL. SSL makes numerous things visible to the two endpoints and they are supposed to match. By splitting the SSL connection, you make these things not

Re: errno=5 in SSL_read( )

Hello.. I'm new here. I'm from Uruguay and i am looking for some help With regular sockets i use to read one char from the server char c; i = recv(fd,&c, 1,0); with SSL_read() is the same? Because i cant read. When i write the GET in the server with the \r\n\r\n at the end nothing append. som

Re: Authenticode in Vista

Arno Garrels wrote: > Hello, > > How do I get this MS-specific extension into a certificate? > SPC_FINANCIAL_CRITERIA_OBJID 1.3.6.1.4.1.311.2.1.27 > i.e. Value: 30 06 01 01 00 01 01 ff > I don't know if it's necessary at all, however in Vista I > cannot get rid of the nasty red security popups. I

Re: SSL and snail mail

Krishna M Singh wrote: We are splitting the SSL connection over our network and thus break this thing. :( thanks and regards -Krishna I simply have to ask, why the h... are you splitting the SSL connection? And checking of fingerprints are used in many other situations too. Say if you con

Re: SSL and snail mail

On Wed, Apr 26, 2006 at 12:07:45AM +0530, Krishna M Singh wrote: > Some banks in Europe send the fingerprint of their certificate (i > guess this is MD5 or SHA digest hash of the certificate) over the > snail mail to their customer and customers are requested to match the > bank's secure server ce

SSL and snail mail

Hi This is quite interesting scenario I yesterday heard from a customer. Some banks in Europe send the fingerprint of their certificate (i guess this is MD5 or SHA digest hash of the certificate) over the snail mail to their customer and customers are requested to match the bank's secure server ce

Authenticode in Vista

Hello, How do I get this MS-specific extension into a certificate? SPC_FINANCIAL_CRITERIA_OBJID 1.3.6.1.4.1.311.2.1.27 i.e. Value: 30 06 01 01 00 01 01 ff I don't know if it's necessary at all, however in Vista I cannot get rid of the nasty red security popups. It's either this missing extension

Export 1024 ciphers

Hi all, Is it true that all EXP1024 ciphers will only work with 512 bit key. I tried with 1024 bit key but I got a failure.If this is true why do we name these ciphers as EXP1024 ciphers they are as good as normal EXP ciphers.  May be I am missing something but if anyone can give

Re: Creating certificates

I'm not sure what's wrong. I think that you might read the configuration file of openssl carefuly. Can you show out you resaults in BASE64 format in order to let others to test then for you? 2006/4/25, nduval (sent by Nabble.com) <[EMAIL PROTECTED]>: I have installed openssl and am hoping to use it

Re: Hi..

Hello, > That is why I put the question asking what is the use of openssl-0.9.8a\apps? On HP-UX openssl is part of the system (beginning hpux11v2 - 11.23). Documentation about these utilities may be found in /opt/openssl/doc/apps directory (in perl pod format) or you may simply use "man" command

Hi..

Hi All, I am new to openssl usage. I am trying to get an idea about openssl stack. I did not understand the usage of files in openssl-0.9.8a\apps in the openssl stack and also they did not seem to be test applications. That is why I put the question asking what is the use of openssl-0.9.8a\ap

RE: Hi..

This is a strange question. You need the applications for a variety of reasons: for generating keypairs, for signing csr's, to display the certificate from a base64 encoded stream, etc etc. Instead of such a vague question, if you tell us exactly what your requirement is, the group can help bette

Hi..

Hello All, Please can any one tell me when to use the progrms present in openssl-0.9.8a\apps. What is the use of these applications? Thanks and Regards, Jaya __ OpenSSL Project http://www.op

Re: How do you know you have a full packet

Hello, > If I have learned anything from socket code it is that you can never > be sure if you get a partial or a full packet. The question is > > if a packet is encrypted (des3) how do you know you have received the > full packet ? In SSL3/TLS1 you have to read SSL record header (5 bytes) from

Re: Apache: modssl SSLRequire

Olaf Gellert wrote: Dominique Lohez wrote: You use the directive Order deny allow so the deny directives are evaluated before the alow directives and furthermore every thing which is not denied is allowed I suggest you should use the Order Allow, deny directive so that everything which