Date: Thu, 15 Oct 1998 07:02:09 +0200 (CEST) From: Andre Albsmeier <andre.albsmeier@mchp.siemens.de> To: Studded@gorean.org (Studded) Cc: andre.albsmeier@mchp.siemens.de, freebsd-questions@FreeBSD.ORG Subject: Re: Netscape Communicator 4.07 for Linux20 Message-ID: <199810150502.HAA24897@internal> In-Reply-To: <3625247C.8EC08881@gorean.org> from Studded at "Oct 14, 1998 3:23:56 pm"
next in thread | previous in thread | raw e-mail | index | archive | help
> Andre Albsmeier wrote:
>
> > Pipe any exportable netscape 4.0x through the following program and
> > you get strong encryption. That's what I do always with the 40-bit
> > versions for HP-UX, FreeBSD, IRIX, SunOS and even Winblows. It keeps
> > me from having to wait until fortify comes out...
> >
> > ---------------------- snip --------------------------
> >
> > #!/usr/local/bin/perl -0pi
> > s/BITS:.*/$_=$&;y,a-z, ,;s, {4}$,true,gm;s, 512,2048,;$_/es
> >
> > ---------------------- snap --------------------------
>
> Can you give a more detailed explanation as to what you mean by "pipe
> it through" and break down what this script does for us less perl
andre@bali:~> the_prog_above < netscape-export > netscape-strong
andre@bali:~> ./netscape-strong
> literate types? It looks like a good deal, but I like to know what I'm
> doing before I do it. :)
Well, since I am no perl freak as well, I ran both netscape versions
(before and after the patch) through hexdump -C and compared
the output. The result appeared to be that all netscape versions
contain the strong crypto code which is being enabled with the code
above. It changes some occurences of "false" to "true" and
some " 512" to "2048".
If you got enough RAM, do the hexdump -C thing and the diff and
you will see it.
At least it works when looking at https://www.fortify.net/cgi-bin/ssl
and https://mozilla-crypto.ssleay.org/cryptocheck.php after the
patch.
BTW, is there something like a "general purpose file editor" for
FreeBSD? I would like to see something as I used to have in my
Atari ST and DOS days... It would be enough to have something which
has the same appearance of hexdump -C but with search, replace
and primitive editing functionality.
>
> Thanks,
>
> Doug
-Andre
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199810150502.HAA24897>