Re: RSA/DSA key bit strength

2009-08-13 Thread carlyoung
On Thu 13/08/09 4:46 AM , Sudarshan Soma sudarshan...@gmail.com sent: Hi Can anone please clarify this data with OPENSSL 0.9.8i: RSA uses key ranges from 768-2048 and can operate only in CBC mode DSA uses key length of 1024 and operates only in CBC ? CBC chaining mode only applies to symmetric

Re: Howto create a certificate for multiple domains?

2009-08-13 Thread deblarinteln
Hi Goetz, | It is called subjectAltName extension. would you mind telling me how and where I have to define the AltName(s) ? And still, how will I get my *.pem certificate converted into a .cer certificate? Thanks a lot Niels -- View this message in context:

Re: Howto create a certificate for multiple domains?

2009-08-13 Thread deblarinteln
Hi Serge, | Use a wildcard domain for your CN | Unless each domain had a separate IP | You need to specify *.mydaomin.tld as the CN so, my CN entry should look like this, if I get you right: *.mydomain.tld and the subdomains would get then kinda automically the certificate or will I have to

Re: RSA/DSA key bit strength

2009-08-13 Thread Sudarshan Soma
On Thu, Aug 13, 2009 at 2:22 PM, carlyo...@keycomm.co.uk wrote: On Thu 13/08/09 4:46 AM , Sudarshan Soma sudarshan...@gmail.com sent: Hi Can anone please clarify this data with OPENSSL 0.9.8i: RSA uses key ranges from 768-2048 and can operate only in CBC mode DSA uses key length of 1024 and

Re: Howto create a certificate for multiple domains?

2009-08-13 Thread Goetz Babin-Ebell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 deblarinteln wrote: | Hi Goetz, Hello deblarinteln, | | It is called subjectAltName extension. | | would you mind telling me how and where I have to define the AltName(s) ? There is the man page x509v3_config. It should contain the info you need. A

UltraSPARC T2 - OpenSSL - PKCS11 ???

2009-08-13 Thread CH-Kami
Hi, I'm currently working on a project involving a Sun T5120 and some crypto... (I'm also to to OpenSSL T2) T2 is supposed to be quite fast for crypto operations : openssl speed rsa signverifysign/s verify/s rsa 512 bits 0.0047s 0.0005s210.7

Re: UltraSPARC T2 - OpenSSL - PKCS11 ???

2009-08-13 Thread Jan Pechanec
On Thu, 13 Aug 2009, CH-Kami wrote: I'm currently working on a project involving a Sun T5120 and some crypto... (I'm also to to OpenSSL T2) hi, this is probably not the best alias since OpenSSL team has nothing to do with the PKCS#11 engine that is shipped with Solaris. T2 is supposed

Re: [openssl-users] UltraSPARC T2 - OpenSSL - PKCS11 ???

2009-08-13 Thread Erwann ABALEA
Hi, Hodie Id. Aug. MMIX, CH-Kami scripsit: I'm currently working on a project involving a Sun T5120 and some crypto... (I'm also new to OpenSSL T2) T2 is supposed to be quite fast for crypto operations : openssl speed rsa signverifysign/s verify/s rsa

Re: UltraSPARC T2 - OpenSSL - PKCS11 ???

2009-08-13 Thread Alan Buxey
hi, your pkcs11 on the Sparc system is fast(!) its just the verification that seems a little b0rked/slow :-| alan __ OpenSSL Project http://www.openssl.org User Support Mailing List

RE: Is Openssl vulnerable to Null-Prefix Attacks?

2009-08-13 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Serge Fonville Sent: Wednesday, 12 August, 2009 04:01 Recently there has been some discussion on the Internet regarding so called null-prefix attacks, see http://www.thoughtcrime.org/papers/null-prefix-attacks.pdf. Is openssl