Re: Netscape/OpenSSL Cipher Forcing Bug

2008-05-31 Thread Victor Duchovni
On Wed, May 28, 2008 at 03:37:06PM -0400, [EMAIL PROTECTED] wrote: > A malicious legitimate client can enforce a ciphersuite not supported by > the server to be used for a session between the client and the server. This > can result in disclosure of sensitive information. If a malicious client is

Netscape/OpenSSL Cipher Forcing Bug

2008-05-29 Thread Sojanna . Mun
ecompile apache as well? Thanks for your help! Netscape/OpenSSL Cipher Forcing Bug THREAT: Netscape's SSLv3 implementation had a bug where if a SSLv3 connection is initially established, the first available cipher is used. If a session is resumed, a different cipher may be chosen if it appears

Re: Netscape+Openssl

2001-08-04 Thread Averroes
Hi Michael, It was my fault, Netscape security tools configuration mistake. Thank for your suggestions Ciao! Michael Ströder wrote: > > Averroes wrote: > > > > But as the time when I wanted to sign my email I got an error message > > telling me : "this operation cannot be performed because a

Netscape+Openssl

2001-08-02 Thread Averroes
Hi all, I built a Root Certificate Authority plus an user certificate. When I wanted to import this user certificate into netscape communicator 4.7 in pkcs12 format, everything seem to be OK! But as the time when I wanted to sign my email I got an error message telling me : "this operation cann

Re: out of memory error with netscape/openssl

2000-01-07 Thread Ben Laurie
jackie wrote: > > Will you tell me what fields I must fill in my certificate that > are different from client certificate or normal certificate? There aren't any that are different, but leaving any blank makes Netscape throw hissy fits. Cheers, Ben. > > Ben Laurie wrote: > > > > > a) Use th

Re: out of memory error with netscape/openssl

2000-01-06 Thread jackie
Will you tell me what fields I must fill in my certificate that are different from client certificate or normal certificate? Ben Laurie wrote: > > a) Use the latest release. > > b) Fill in _all_ the fields in your server certificate. > > Cheers, > > Ben. > > -- > SECURE HOSTING AT THE BUNKER! ht

Re: out of memory error with netscape/openssl

2000-01-05 Thread Ben Laurie
Ramesh Panuganty wrote: > > Hi, > > I get an "out of memory" error when I tried to connect to my machine > via netscape on "https" (both windows and linux platforms). Internet > explorer from 95/98/NT does not have any complaints and works > properly. > > My machine runs redhat6.0, linux kernel

out of memory error with netscape/openssl

2000-01-05 Thread Ramesh Panuganty
Hi, I get an "out of memory" error when I tried to connect to my machine via netscape on "https" (both windows and linux platforms). Internet explorer from 95/98/NT does not have any complaints and works properly. My machine runs redhat6.0, linux kernel 2.2-15. I installed openssl 0.9.4-3 and