[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [iaik-ssl] iSaSiLk on OS/390



I am not sure that I completely understand your problem. I have also run
the test you suggested and it worked for me.

I see that there may be a problem when using PEM encoded certificates,
but those are never used during an SSL handshake. The only place where
you might encounter them is when reading your server and client
certificates, but those will we read from the local disc and you can make
sure that they work by storing them in your local character encoding or
using DER alltogether.

Regards,

 Andreas Sterbenz              mailto:Andreas.Sterbenz@iaik.tu-graz.ac.at


-----Ursprüngliche Nachricht-----
Von: Thomas Ernst <thomas.ernst@ubs.com>
An: <iaik-ssl@iaik.tu-graz.ac.at>
Cc: <guido-zb.haechler@ubs.com>
Gesendet: Dienstag, 09. November 1999 12:04
Betreff: [iaik-ssl] iSaSiLk on OS/390


> Hello,
>
> we like to run an SSL server on an OS/390 system and a client on
Windows NT
> (both based on iSaSiLk 2.51). Have you tested your libraries for
> communication between these platforms?
>
> I am asking because we have severe problems with the character
> encoding/decoding when converting strings to byte arrays and vice versa
> (there isn't any problem when communicating between WindowsNT and Unix
> platforms). We found that the problem appears in the
> fromInputStream(InputStream is) method of the iaik.asn1.ASN1 class
(there
> are probably other places but this method is called very often). In
this
> method, you check a string previously converted from a byte array:
>     if (new String(buf).equals("-----BEGIN")) {
> ...
> and if the peer has a non-compatible encoding scheme, this returns
false and
> the handshake fails.
>
> The errors can be reproduced by starting the demo.server.SSLServer on
an NT
> machine as follows (Cp1047 is the EPCIDIC encoding on OS/390):
> java -Dfile.encoding=Cp1047 demo.server.SSLServer
> and the client:
> java demo.client.SSLClient localhost:4433
>
> Has anybody experienced (and/or solved) similar problems?
>
> Thanks for any hint
>
> Thomas Ernst
>
> --------------------------------------------------------------------
>                              please note
>
>  The mail address mailto:ernst.thomas@ch.swissbank.com expires.
>
> --------------------------------------------------------------------
>     _/_/_/  _/_/_/  _/_/_/    UBS AG
>    _/  _/  _/      _/         Dr. Thomas Ernst
>   _/_/_/  _/_/_/  _/          Hochstrasse 16 / 4150
>  _/  _/  _/      _/           CH-4002 Basel
> _/  _/  _/_/_/  _/_/_/
>                               Phone: +41 61 288 4872, FAX: ++ 1710
> Advanced Engineering Center   Email: thomas.ernst@ubs.com
> --------------------------------------------------------------------
>
> --
> Mailinglist-archive at
http://jcewww.iaik.tu-graz.ac.at/mailarchive/iaik-ssl/maillist.html
>
> To unsubscribe send an email to listserv@iaik.tu-graz.ac.at with the
folowing content: UNSUBSCRIBE iaik-ssl
>
>
>


smime.p7s