You can't get SSLref from Netscape if you are in the Netherlands. Check out SSLeay from ftp.psy.uq.oz.au:/pub/Crypto/SSL. It is free. ... -- Sameer Parekh...
sameer@... ...
Jun 2, 1996 9:38 pm
1311
To remove your name from the ssl-talk list send mail to <ssl-talk-request@...> with unsubscribe in the Subject: of the message. Flailing at the...
Phil Karlton ...
Jun 3, 1996 6:37 am
1312
subscribe...
Vincent.Warscotte@...
Jun 3, 1996 10:17 am
1313
... Another closely related minor typo in the 3/4/96 spec: pad_1 and pad_2 are defined in 7.2.3.1, but pad1 and pad2 are used elsewhere (eg. in 7.6.8 and ...
Kevin Steves ...
Jun 3, 1996 1:06 pm
1314
... The DN is the sequence of bytes commencing with 0x31 0x0B 0x00 0x09... The 0x005F is a 16-bit vector length, as is appropriate given that the SSL 3.0 type...
Tim Dierks ...
Jun 3, 1996 2:01 pm
1315
... Internet Explorer (>= 2.0?), Emacs-W3 (if you see the Extension: security/ssl header, otherwise assume any version supports it), a few hacked versions of...
William Perry ...
Jun 3, 1996 2:35 pm
1316
I am using a plugin to "hitch a ride" on ssl in winnt 3.0b4, and find that with client authentication my plugin is a "one-shot' run, after which 3.0b4 croaks....
Ben Groeneveld ...
Jun 3, 1996 5:08 pm
1317
... I hate to comment on my own mail, but - the behavior is the same for ns enterprise server 2.0b4 doing client authentication....
Ben Groeneveld ...
Jun 3, 1996 5:30 pm
1318
[Hi there. I'm new to this list.] Is there a SSL telnet client for Mac or Windows? I have a kerberos plug-in for NCSA Telnet on the Mac, but can't find ...
Simson L. Garfinkel ...
Jun 3, 1996 6:05 pm
1319
... We have been doing some talking of doing an SSL 3 capable Mac Comm Toolbox telnet tool, probably in late summer time frame, and probably in co-operation...
Christopher Allen ...
Jun 3, 1996 7:56 pm
1320
... It has to be PKCS #1 in SSL 3, as there is no mechanism for stating or negotiating any other scheme. ... For sessions using RSA or RSA Export key exchange,...
Tim Dierks ...
Jun 4, 1996 12:57 am
1321
... Which way are you looking at going with the telnet? The seperate SSLtelnet port or the dynamic negotiation (or both)? ... SSLeay builds as a DLL under 3.1...
Eric Young ...
Jun 4, 1996 1:51 am
1322
... Right now I think choice of both should be options that are set by the user -- I like dynamic negotiation in theory, but in practice only time will tell. ...
Christopher Allen ...
Jun 4, 1996 6:10 am
1323
In the 3/4/96 spec, section 8.1, why are the values 'A', 'BB', and 'CCC' prepended to other SHA input in the master_secret computation? I also see these same...
Kevin Steves ...
Jun 4, 1996 1:10 pm
1324
I'm looking to telnet from my Netcom account to my vineyard.net account. Setting up Kerberos has been problematic. Using telnet without encryption is also...
Simson L. Garfinkel ...
Jun 4, 1996 11:03 pm
1325
... The XUDA (Xcert User Database API) handles all four of these and all of our WWW server plugins are built on top of them. XUDA uses the full cert and can ...
Patrick Richard ...
Jun 5, 1996 12:03 am
1326
RE>>ssl telnet client for Mac, Windows 6/4/96 Hi, We at NASA are also interested in using SSL telnet and ftp for the Mac = and PC platforms. Paul ... ...
Paul Ma ...
Jun 5, 1996 12:32 am
1327
The organisation that I work for currently assessing the viability of establishing secure access via the Internet to corporate data for a trusted community....
Paul A. Fahey ...
Jun 5, 1996 1:17 pm
1328
... So were the choice of constants arbitrary (eg. could you have used 'X', 'YY', 'ZZZ'), or were 'A', 'BB', and 'CCC' chosen for a particular reason? Kevin...
Kevin Steves ...
Jun 5, 1996 2:08 pm
1329
... [ much more deleted ] A very interesting essay but... You apparently use a different dictionary than I do. Verifying the certificate *is* authenticating...
Jeff Barber ...
Jun 5, 1996 3:09 pm
1330
... You are confusing the certificate with the authentication protocol. Each user needs a private signature key and the authentication protocol needs to give...
Carl Ellison ...
Jun 5, 1996 4:11 pm
1331
... There's another dictionary difference which few people discuss: what do you mean by "identity"? Some people mean a name. Some people mean a human body. ...
Carl Ellison ...
Jun 5, 1996 4:34 pm
1332
Hi, I am planning on setting up a Netscape Secure Server and have a question on what is involved (on the client's side) in order to set-up a secure session. ...
psurat@...
Jun 5, 1996 5:25 pm
1333
... With respect to SSL: "the person(s) or entity(-ies) who have access to the private key". This is the sole type of identity relevant to the SSL protocol,...
Jeff Barber ...
Jun 5, 1996 5:38 pm
1334
Hi all, I remember discussions about changing the cipher suite within a connection. I studied the (latest ?) draft-freier-ssl-version-3-01.txt and didn't found...
Holger Reif ...
Jun 5, 1996 5:58 pm
1335
I've generated certs for Navigator 3.0 using both Verisign's "Digital ID Center" (www.verisign.com) and the XCert demo CA (www.x509.com). What is the protocol...
David Brownell - Java...
Jun 5, 1996 6:05 pm
1336
... Along these lines, is there an environment variable, e.g., SSL_CLIENT_DN, that passes the authenticated client's DN into a CGI? Currently, I do not see...
Ben Groeneveld ...
Jun 5, 1996 6:21 pm
1337
I believe that the keys are generated by the Navigator (especially since there is an undocumented HTML tag in the Client Cert generation pages "KEYGEN"). I ...
Osborne Hardison ...
Jun 5, 1996 7:21 pm
1338
We just did an update of our digital ID from VeriSign, and now we get an error when connecting to the server that says "Server name does not match the...
Mark Wladika ...
Jun 6, 1996 1:00 am
1339
... client ... presented. ... authentication ... Our 'mode 1.5' patches to Apache (comes in the Software Sentry) put up a no-access page if the client is...