Re: Using cryptlib and matching requirements

David Pierre <[email protected]> writes:

>We have some requirements, and i want to know if cryptlib match them :

It's probably best to ask this sort of thing off-list, this isn't really a
general cryptlib question that other list members will be interested in...

>This is in a TLS session, is renegotiation available ?

No.  It doesn't serve any useful purpose, and has only led to exploitable
security vulnerabilities in the past.

(Well, when I say "useful purpose" I mean for an attacker it's very useful
because of the security holes it opens up, but it's not useful for the
defenders).

>- In certificate verification, is that possible to:
>> accept any certificate from an authorized CA ?
>> accept individual certificates from an authorized CA (for example, only
>4/10 certificates from the CA) ?

You can accept (or refuse to accept) any certificates you like.

>Is certificate size could be checked to ensure that ?

Again, you can import (or refuse to import) any size of certificate that you
like.

>Are these profiles defined ? 

Yes, those are just standard certificates and attribute certificates.

>Can we create specific attributes not defined in the norm ?

Yes, see "Generic Extensions" on page 253 of the manual.

Peter.

_______________________________________________
Cryptlib mailing list
[email protected] via Mail: [email protected]
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.