openssl

[Vanlerberghe Ignace]

how to use openssl in a HPUX 10.20
what do you need ?
example who to use it ?

thanks

Ignace

[Christian Gebhardt]

Hi
with ssl you can encrypt lan traffic. Example:

If you use swat for samba administration (http://machine:901) the root-password is sent via the lan. Now you can install a certificat and use swat with https://machine:901

steps to do this:
- delete swat from inetd.conf
- restart inetd
- install openssl
- install stunnel (wrapper for openssl)
- build certificat: /usr/local/ssl/bin/openssl req -new -x509 -days 365 -nodes -config
/opt/stunnel-3.22/stunnel.cnf -out /opt/stunnel-3.22/stunnel.pem -keyout /opt/stunnel-3.22/stunnel.pem
- starting /opt/stunnel-3.22/stunnel -p /opt/stunnel-3.22/stunnel.pem -d 901 -l /opt/samba/bin/swat swat && exit 0

It's a wide and interesting field to work, ...

Chris

[Vanlerberghe Ignace]

Thanks !

And how to use it to secure a simple ascii
data file that will be sent to a official
government institute via ftp ?

[Christian Gebhardt]

Hi
easiest way to encrypt file with ftp is to use sftp. sftp comes with free ssh distributions, e.g. openssh.

Steps to do
- install on your machine: openssh, openssl, zlib (you'll find many postings about this)
- on the other side there must be installed ssh (sshd have to run)
- connect with sftp ( search in this forum about the different authentication methods: hostkey, public key, ...)

sorry for the late reply
Chris