Re: [xml] SSL/TLS support

Hi there.

Well, w/o random generator seed you'll not be able to generate session
for SSL and by this you'll not be able to start the connection. In the
same time,
w/o trusted certificates initialized, your client will not be able to
verify the
certificate that server sends to you and by this the handshake fails
(and the connection
is failed). These are not security measures but steps to establish the

Uh... that I didn't know. Please forgive my ignorance. I thought that the
initialising the RNG would give a high quality keys, but I didn't suspect
that it would showstop the generation of the session-key alltogether. Also,
I believed that the certificate check must be done manually and had no idea
that OpenSSL performs this automatically.

Okay, I am interrested in the matter, but we should perhaps continue talking
about this in private, preventing the exposure of the mailing list to
non-xml issues and also preventing my further blamage in public :-) :-)


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]