Re: ipsvd-0.9.3, sslio minimum checks?

On Sat, Jun 05, 2004 at 12:12:47AM +0200, Clemens Fischer wrote:
> * Gerrit Pape:
> > On Thu, Jun 03, 2004 at 02:14:11PM +0200, Clemens Fischer wrote:
> >> he!  i had just finished patching matrixssl-1.0.2, and behold:  right
> >> after
> > Good!
> 
> ah, that was simple.  but getting it into your build procedure required
> about the same amount of work.

Why is that?  You could simply apply a patch in the matrixssl: target of
the Makefile, I think.

> btw, i also tried tcpclient + sslio because i thought this should have
> worked as well.  am i right?  what i do know is that sslclient is picky

No, sslio currently only works on the server side.

> about what's presented in the server certificate, which is why i also
> tried giving it the exact same certificate the server uses.
> unfortunately, that cert doesn't contain my hosts name, which is why i
> think sslclient rejects it:

See the -X option to sslclient.

> soooo.  i'm in desparate need for a little *and precise* tutorial about
> how to make a server key, together with the openssl.cnf used to make it.

This works for me
 # openssl req -new -x509 -days 365 -nodes -out certfile -keyout keyfile

Regards, Gerrit.