Re: [users@httpd] How does client decrypt data in a HTTPS-based WebDAV transfer

2012-03-26 Thread Ajay Garg
Thanks Tom.. Ahh.. that makes it even more efficient; since the symmetric key is the only one required for encryption/decryption. Moreover, this symmetric key is only known to the client and the server. Thanks Thanks and Regards, Ajay On Mon, Mar 26, 2012 at 2:52 PM, Tom Evans wrote: > O

Re: [users@httpd] How does client decrypt data in a HTTPS-based WebDAV transfer

2012-03-26 Thread Tom Evans
On Mon, Mar 26, 2012 at 10:12 AM, Ajay Garg wrote: > Thanks a ton Sander. > > So on session setup-phase, the server sends the public-key to the client > (which would hardly be a bother, even if it is intercepted by a > eavesdropper). This public key is then used to encrypt the data on the > client

Re: [users@httpd] How does client decrypt data in a HTTPS-based WebDAV transfer

2012-03-26 Thread Ajay Garg
Thanks a ton Sander. So on session setup-phase, the server sends the public-key to the client (which would hardly be a bother, even if it is intercepted by a eavesdropper). This public key is then used to encrypt the data on the client, send over the wire, and decrypted by the server's private key

Re: [users@httpd] How does client decrypt data in a HTTPS-based WebDAV transfer

2012-03-25 Thread Sander Temme
Ajay, On Mar 25, 2012, at 9:54 PM, Ajay Garg wrote: > Thanks Eric for the reply. > > Eric, but how is the shared secret comfigured? > I do not remember configuring anything like this for the HTTPS-based WebDAV > server. As your DAV client and the server set up their SSL connection, they exchan

Re: [users@httpd] How does client decrypt data in a HTTPS-based WebDAV transfer

2012-03-25 Thread Ajay Garg
Just to be more elaborate, all that has been configured (for security purposes) is :: ### SSLCertificateFile = /etc/ssl/certs/ssl.crt SSLCertificateKeyFile /etc/ssl/certs/ssl.key ###

Re: [users@httpd] How does client decrypt data in a HTTPS-based WebDAV transfer

2012-03-25 Thread Ajay Garg
Thanks Eric for the reply. Eric, but how is the shared secret comfigured? I do not remember configuring anything like this for the HTTPS-based WebDAV server. Thanks and Regards, Ajay On Sun, Mar 25, 2012 at 11:39 PM, Eric Covener wrote: > > BUT, HOW IS THE CLIENT ABLE TO DECRYPT THE DATA? (I h

Re: [users@httpd] How does client decrypt data in a HTTPS-based WebDAV transfer

2012-03-25 Thread Eric Covener
> BUT, HOW IS THE CLIENT ABLE TO DECRYPT THE DATA? (I have been running both > webdav server and client on the same machine; so it might very well > be the case that some info from "ssl.conf" and/or "httpd.conf" is being used > at the client side. However, I am just guessing ... Under SSL, the cli

[users@httpd] How does client decrypt data in a HTTPS-based WebDAV transfer

2012-03-25 Thread Ajay Garg
Hi all. I have managed to get a HTTPS-based WebDAV server up and running. However, I have a conceptual query (sorry if I sound an absolute idiot) :: ## When we configure "