KSSL

[Jeffrey Altman]

vj wrote:

> I 've created a ssl security context using KSSL in my httpd [non
> gssapi, non spnego] Could anyone give me any clue on how to use
> SSLv3:KRB cipher suite with ANY browser ?
> 
> The server code goes like this :
> 
> ....
>   SSL_CTX_set_cipher_list(V_ctx_ptr,SSL3_TXT_KRB5_RC4_128_SHA);
>   s_ssl=SSL_new(V_ctx_ptr);
> 
> 	if (s_ssl  &&  s_ssl->kssl_ctx){
>                 char	localhost[255+2];
> 
> 		if (gethostname(localhost, sizeof localhost-1) == 0){
> 			localhost[sizeof localhost-1]='\0';
> 			kssl_ctx_setstring(s_ssl->kssl_ctx, KSSL_SERVICE,"host");
> 			kssl_ctx_setstring(s_ssl->kssl_ctx, KSSL_SERVER,localhost);
> 			kssl_ctx_setstring(s_ssl->kssl_ctx, KSSL_KEYTAB,KRB5KEYTAB);
> 			}
> 		}
> ....
> 
> Thanks,
> vj
> 

There are no browsers that I am aware of that support the Kerberos
ciphers.

Jeffrey Altman


-- 
-----------------
This e-mail account is not read on a regular basis.
Please send private responses to jaltman at mit dot edu