Re: DTLS server implementation experiences and documentation

2009-01-24 Thread David Woodhouse
On Sat, 2009-01-24 at 23:03 +0100, Georges Le grand wrote: > So it is alike SSL VPN with data encapsulated into HTTP Packets, but I > don't get how does HTTP run over UDP. Probably best explained by the code... it just uses HTTP for the initial setup -- a CONNECT request with an HTTP cookie for au

Re: DTLS server implementation experiences and documentation

2009-01-24 Thread Georges Le grand
Dear David, Thanks for the reply. So it is alike SSL VPN with data encapsulated into HTTP Packets, but I don't get how does HTTP run over UDP. Kind regards GLG 2009/1/24 David Woodhouse > On Sat, 2009-01-24 at 00:13 +0100, Georges Le grand wrote: > > I wonder if you could give out a reference

OpenSSL pseudo-psk usage

2009-01-24 Thread Chase Douglas
Hello all, I'm wanting to use openssl to provide a psk-like authentication and encryption. While I see that openssl cvs has some TLS-PSK functionality, this does not seem to exist in any of the released tarballs. I run gentoo and I don't see any psk related options when I run openssl s_cl

Re: One certificate for both hostname and IP

2009-01-24 Thread Dr. Stephen Henson
On Sat, Jan 24, 2009, Marco De Vitis wrote: > Hi, > running my own CA on a Debian Etch machine (openssl 0.9.8c) I need to > create a certificate for a private mailserver, which must be reachable both > using its hostname and its IP address. So the certificate needs to contain > both, to prevent

certificate verification (with all data in memory)

2009-01-24 Thread Miroslav Kratochvil
Hi all, I've already asked here about similar thing before, but as things got a little clearer now (I've read through a load of docs and code...), I guess I can formulate my question a little better now. My problem is, roughly, this: - I got some CA certificates loaded in the memory (say, in STAC

Re: Make test failed for Fips Capable openssl 9.8J

2009-01-24 Thread joshi chandran
Is it neccessary to use same compiler to build opensslfips 1.2 and openssl 9.8J . if i am using different compiler ,does it create problem . Please Reply as this issue is become a problem for me for generating the shared library of fips capable openssl 9.8j Opensslfips 1.2 # ./config -t Operating

One certificate for both hostname and IP

2009-01-24 Thread Marco De Vitis
Hi, running my own CA on a Debian Etch machine (openssl 0.9.8c) I need to create a certificate for a private mailserver, which must be reachable both using its hostname and its IP address. So the certificate needs to contain both, to prevent warnings at the client side. The mail clients us

Re: DTLS server implementation experiences and documentation

2009-01-24 Thread David Woodhouse
On Sat, 2009-01-24 at 00:13 +0100, Georges Le grand wrote: > I wonder if you could give out a reference on how to establish a VPN > using DTLS or to tell how to do so. We are just using Cisco's "AnyConnect" VPN, which runs over an HTTPS 'CONNECT' and will use DTLS for subsequent data transfer if i