Re: ssl without data encryption

2006-03-29 Thread Nelson B Bolyard
> On 3/29/06, berle oliver <[EMAIL PROTECTED]> wrote: >>I also found this thread which I didn't see earlier >>http://groups.google.com/group/netscape.public.mozilla.crypto/browse_frm/thread/c7e57b3e6fa84bc9/0e2b74e796baf1e7?&hl=en#0e2b74e796baf1e7 >> >>This works but introduces a new problem: >>In

Re: ssl without data encryption

2006-03-29 Thread Kyle Hamilton
TLS and SSL work by finding the "highest-rated" algorithm that both sides support. You could conceivably perform a standard handshake, determine that the connection doesn't need the encryption, and then force a renegotiation with only the NULL ciphers. (This would also allow you to determine if t

Re: ssl without data encryption

2006-03-29 Thread berle oliver
Thanks Mohamad! I also found this thread which I didn't see earlier http://groups.google.com/group/netscape.public.mozilla.crypto/browse_frm/thread/c7e57b3e6fa84bc9/0e2b74e796baf1e7?&hl=en#0e2b74e796baf1e7 This works but introduces a new problem: In order for it to work I have to disable all the

Re: ssl without data encryption

2006-03-29 Thread Nelson B Bolyard
berle oliver wrote: > Is there a way to turn off data encryption on an SSL > connection? In my case client authentication is much > more important and the data encryption step simply > adds too much overhead. Thanks, Yes, There are some SSL "cipher suites' that do only authentication + message in

Re: ssl without data encryption

2006-03-29 Thread Mohamad Badra
Hello Berle, You can use the following CipherSuite TLS_RSA_WITH_NULL_MD5 TLS_RSA_WITH_NULL_SHA Badra berle oliver a écrit: Hello, Is there a way to turn off data encryption on an SSL connection? In my case client authentication is much more important and the data encryption step simply adds

ssl without data encryption

2006-03-29 Thread berle oliver
Hello, Is there a way to turn off data encryption on an SSL connection? In my case client authentication is much more important and the data encryption step simply adds too much overhead. Thanks, =Berle __ Do You Yahoo!? Tired of spam? Yahoo! Mai

problem enumerating nicknames in certdb (error -12285?)

2006-03-29 Thread David Stutzman
Hello, I started off compiling and running sample program 6 (available here: http://www.mozilla.org/projects/security/pki/nss/sample-code/sample6.html) I followed the directions in the comment block at the top and created the new NSS Database using "certutil -N -d ." and setting "test" as the