Re: CMP and SCEP problem

-----Original Message-----
From: Artur Pietrzyk [mailto:sviss@...]
Sent: Monday, April 13, 2009 8:17 PM
To: 'Artur Pietrzyk'; 'Peter Gutmann'; 'cryptlib@...';
'tomasg@...'
Subject: RE: [Cryptlib] CMP and SCEP problem



-----Original Message-----
From: Artur Pietrzyk [mailto:sviss@...]
Sent: Monday, April 13, 2009 7:36 PM
To: 'Peter Gutmann'; 'cryptlib@...'; 'tomasg@...'
Subject: RE: [Cryptlib] CMP and SCEP problem

Hi,

How to unsubscribe from this mailing group?

Thanks,
Artur Pietrzyk

-----Original Message-----
From: cryptlib-bounces@...
[mailto:cryptlib-bounces@...] On Behalf Of Peter Gutmann
Sent: Monday, April 13, 2009 5:07 PM
To: cryptlib@...; tomasg@...
Subject: Re: [Cryptlib] CMP and SCEP problem

Tomas Gustavsson <tomasg@...> writes:

>SHA1 is usually supported though and is inter-operable with all routers we
>have tested such as Juniper and Cisco. they support certificates issued
using
>SHA1WithRSA.

I've found the same thing, everything I've managed to test against
(including
really old routers and embedded devices) supports SHA-1 automatically even
if
it predates any SCEP RFC draft that mentions it, SHA-1 is sort of the
universal substrate of security mechanisms so it seems you can always rely
on
it.  OTOH for anything newer it's risky because even the mechanism to
determine whether you can use something better than SHA-1 isn't
well-supported
and leads to strange failures.

Peter.

_______________________________________________
Cryptlib mailing list
Cryptlib@... via Mail:
cryptlib-request@...
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.


_______________________________________________
Cryptlib mailing list
Cryptlib@... via Mail: cryptlib-request@...
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.