Re: 0 bit encryption?

2006-11-17 Thread Girish Venkatachalam
On Fri, Nov 17, 2006 at 11:04:48PM -0500, Victor Duchovni wrote: > On Fri, Nov 17, 2006 at 08:14:26PM -0500, Brian Thompson wrote: > > We have a group of users here who wish to send email through > > Thunderbird to a SMTP server (sendmail) that requires SSL/TLS > > authentication/encryption. The co

Re: 0 bit encryption?

2006-11-17 Thread Marek Marcola
Hello, > Hi, this might sound like an odd question, but I'm trying to figure > out if there's a way to "use" openssl without actually encrypting > anything. Of course, SSL/TLS consists of three purposes: - peer authentication (where, for example, RSA is used) - data encryption (DES, AES ...) - d

Re: SHA256 as of which version?

2006-11-17 Thread Marek Marcola
On Fri, 2006-11-17 at 16:16 -0800, [EMAIL PROTECTED] wrote: > Which version of OpenSSL introduced sha256 support? I cannot find it > in the changelogs on the site... 0.9.8 and above. Best regards, -- Marek Marcola <[EMAIL PROTECTED]> __

Re: 0 bit encryption?

2006-11-17 Thread Victor Duchovni
On Fri, Nov 17, 2006 at 08:14:26PM -0500, Brian Thompson wrote: > Hi, this might sound like an odd question, but I'm trying to figure > out if there's a way to "use" openssl without actually encrypting > anything. > > We have a group of users here who wish to send email through > Thunderbird to a

Re: common name for https certificates in embedded devices

2006-11-17 Thread Clem Taylor
Hi, Firefox seems to accept the subjectAltName extension, but I'm having troubles getting firefox to trust the additional level of certificate hierarchy. I started out with something that looks like: Root CA cert (self signed) [added to trust store on browser] Device CA cert (signed by Root CA

0 bit encryption?

2006-11-17 Thread Brian Thompson
Hi, this might sound like an odd question, but I'm trying to figure out if there's a way to "use" openssl without actually encrypting anything. We have a group of users here who wish to send email through Thunderbird to a SMTP server (sendmail) that requires SSL/TLS authentication/encryption. Th

SHA256 as of which version?

2006-11-17 Thread Richard Conlan
Which version of OpenSSL introduced sha256 support? I cannot find it in the changelogs on the site... ~RMC

Re: Version 3 certificate for Cisco ACS?

2006-11-17 Thread Dr. Stephen Henson
On Fri, Nov 17, 2006, Thomas Bleek wrote: > On Fri, 17 Nov 2006, Dr. Stephen Henson wrote: > > > > What technique have you used to create the certificate? The simplest way is > > to > > use the CA.pl script which will create a v3 certificate by default. Various > > ancient and/or broken "cookboo

Re: Version 3 certificate for Cisco ACS?

2006-11-17 Thread Thomas Bleek
On Fri, 17 Nov 2006, Dr. Stephen Henson wrote: > > What technique have you used to create the certificate? The simplest way is to > use the CA.pl script which will create a v3 certificate by default. Various > ancient and/or broken "cookbooks" can suggest all manner of weird commands. Hello Steve

Installing Verisign Trusted Root Public Certificates

2006-11-17 Thread Randy
Can't seem to install these correctly. I "installed" the cer files in the root pack ln -s C1_PCA_G3v2.cer `/usr/local/ssl/bin/openssl x509 -hash -noout -in C1_PCA_G3v2.cer`.0 ln -s C2_PCA_G3v2.cer `/usr/local/ssl/bin/openssl x509 -hash -noout -in C2_PCA_G3v2.cer`.0 ln -s C3_PCA_G3v2.cer `/usr/l

Re: Doubt regarding X509 Extension

2006-11-17 Thread Dr. Stephen Henson
On Fri, Nov 17, 2006, Manivannan S - TLS, Chennai wrote: > Hi all, > > I am working in an application which involves TLS connection. My > requirement is to read > > subjectAltName from the client certificate received by the server, when > accepting TLS connection. > > > >

Re: Version 3 certificate for Cisco ACS?

2006-11-17 Thread Dr. Stephen Henson
On Fri, Nov 17, 2006, Thomas Bleek wrote: > Hello, > > sorry for the surely simple question but I'm stuck at this > problem. > > I have managed to "build" a ca with private key an certificate and > made also signed certificates for two Sun Directory servers without problem. > > But now we want

Version 3 certificate for Cisco ACS?

2006-11-17 Thread Thomas Bleek
Hello, sorry for the surely simple question but I'm stuck at this problem. I have managed to "build" a ca with private key an certificate and made also signed certificates for two Sun Directory servers without problem. But now we want to build a certificate for a cisco cesure acs radius server.

Re: 3DES problem when connecting to Microsoft SSL

2006-11-17 Thread Victor Duchovni
On Fri, Nov 17, 2006 at 01:54:09PM +0100, Tomas Svensson wrote: > Hi, > > When i connect to a Microsoft exchange server (Microsoft ESMTP MAIL > Service, Version: 6.0.3790.211) and use STARTTLS with the DES-CBC3-SHA > algorithm, OpenSSL first establishes an SSL connection but dies after > some tra

3DES problem when connecting to Microsoft SSL

2006-11-17 Thread Tomas Svensson
Hi, When i connect to a Microsoft exchange server (Microsoft ESMTP MAIL Service, Version: 6.0.3790.211) and use STARTTLS with the DES-CBC3-SHA algorithm, OpenSSL first establishes an SSL connection but dies after some traffic: 250 OK mail from: <> write to 080B5AF8 [080BF8B0] (74 bytes => 74 (0x

RE: Is openSSL supported on 64-bit Linux ?

2006-11-17 Thread Agarwal, Saumya
Hello, A follow up on my previous email on the same thread. I am building OpenSSL-0.9.7c on a 64-bit Red Hat Linux 2.6.9-5.EL system. I was getting the following error - cryptlib.c:1: error: CPU you selected does not support x86-64 instruction set make[3]: *** [cryptlib.o] Error 1 make[2]: ***