[24815] in Kerberos
Re: KSSL
daemon@ATHENA.MIT.EDU (Jeffrey Altman)
Tue Oct 11 12:35:30 2005
From: Jeffrey Altman <jaltman2@nyc.rr.com>
Message-ID: <9AR2f.9630$wf6.2427437@twister.nyc.rr.com>
Date: Tue, 11 Oct 2005 16:17:09 GMT
To: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
vj wrote:
> I 've created a ssl security context using KSSL in my httpd [non
> gssapi, non spnego] Could anyone give me any clue on how to use
> SSLv3:KRB cipher suite with ANY browser ?
>
> The server code goes like this :
>
> ....
> SSL_CTX_set_cipher_list(V_ctx_ptr,SSL3_TXT_KRB5_RC4_128_SHA);
> s_ssl=SSL_new(V_ctx_ptr);
>
> if (s_ssl && s_ssl->kssl_ctx){
> char localhost[255+2];
>
> if (gethostname(localhost, sizeof localhost-1) == 0){
> localhost[sizeof localhost-1]='\0';
> kssl_ctx_setstring(s_ssl->kssl_ctx, KSSL_SERVICE,"host");
> kssl_ctx_setstring(s_ssl->kssl_ctx, KSSL_SERVER,localhost);
> kssl_ctx_setstring(s_ssl->kssl_ctx, KSSL_KEYTAB,KRB5KEYTAB);
> }
> }
> ....
>
> Thanks,
> vj
>
There are no browsers that I am aware of that support the Kerberos
ciphers.
Jeffrey Altman
--
-----------------
This e-mail account is not read on a regular basis.
Please send private responses to jaltman at mit dot edu
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
