Hai Forum,
I am quite unsure whether i can put forward a Technical Question here,
But i found no other way to get an immeadiate reaction,So here is my question
Has any of you guys work experience with OpenSSL.Since i work to make
a client authentification for my client server application,It wud be a great
help if some of you can give me some tips regarding it ..I found a couple
documention on the web ...but still not suffice for my need.

Thank you in advace
Shino

I used apache-mod_ssl-open SSL for setting up an apache reverse proxy with SSL support. I dont know if it is useful. But u can download a precompiled version from the apache site and on the fly configure the httpd.conf file.

You can even use the standard java keystore for the certificate and private key store.

regards
Jani

let me guess ...you want to use client certificates?

Ya,Exactly, I developed client and a sever ,I want to make the server capable
of authnticate the client,So that any possible unauthorised client intrusion can be avoided.I work under Linux ... code is written in C++.
Can you give some Ideas about it ,Like how i can authenthicate the
client with open SSL?

thank you
Regards
Shino

You need to create a client certificate and have it signed by a CA, (you can create your own Certificate Authority with OpenSSL tools, btw). You then load the client cert into your client's keystore, during the SSL protocol handshake both parties exchange their keys ...

how far are you in the process?

Actually am at the very beginning of the process,Just started learning the
basics,I think i have made CA with the open SSL tool ...but now i have
make connection with the server through SSL ! Is there any good examples
which i can follow ?
thank you

Well, first you need to understand the fundamentals of ssl, since the developers of openSSL only provide an implementation and assume that you already know the rest.

So first, the protocol explained:
http://www.securitydocs.com/Cryptology/Encryption/SSL
http://www.sans.org/rr/papers/44/1029.pdf

The protocol itself:
http://wp.netscape.com/eng/ssl3/draft302.txt

OpenSSL handbook:
http://www.pca.dfn.de/certify/ssl/handbuch/ossl095/ossl095.html

and if you really want to begin building secure applications, then in any case, read Bruce Schneier's excellent "Applied Cryptography"

First of all thank you very much for these links,I hope
this would be a great help for the implemetation.Btw,if you
don't mind can you please give your e-mail adress,so that
i can avoid writing such tech. discussion in this forum.

thank you very much
Shino

Hello aalvarez,

sorry i forgot to give my e-mail adress in the last post ...
mathukutty@zhr.tu-dresden.de

thank you again
Shino

Hi Shino,

Just wrote you an email.

cheers,
-a