From owner-freebsd-questions Wed Oct 14 22:02:45 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id WAA03038 for freebsd-questions-outgoing; Wed, 14 Oct 1998 22:02:45 -0700 (PDT) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from david.siemens.de (david.siemens.de [192.35.17.14]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id WAA03032 for ; Wed, 14 Oct 1998 22:02:43 -0700 (PDT) (envelope-from andre.albsmeier@mchp.siemens.de) X-Envelope-Sender-Is: andre.albsmeier@mchp.siemens.de (at relayer david.siemens.de) Received: from mail.siemens.de (salomon.siemens.de [139.23.33.13]) by david.siemens.de (8.9.1a/8.9.1) with ESMTP id HAA09267 for ; Thu, 15 Oct 1998 07:02:15 +0200 (MET DST) Received: from curry.mchp.siemens.de (daemon@curry.mchp.siemens.de [146.180.31.23]) by mail.siemens.de (8.9.1a/8.9.1) with ESMTP id HAA01837 for ; Thu, 15 Oct 1998 07:02:16 +0200 (MET DST) Received: (from daemon@localhost) by curry.mchp.siemens.de (8.8.8/8.8.8) id HAA23988 for ; Thu, 15 Oct 1998 07:02:17 +0200 (CEST) From: Andre Albsmeier Message-Id: <199810150502.HAA24897@internal> Subject: Re: Netscape Communicator 4.07 for Linux20 In-Reply-To: <3625247C.8EC08881@gorean.org> from Studded at "Oct 14, 1998 3:23:56 pm" To: Studded@gorean.org (Studded) Date: Thu, 15 Oct 1998 07:02:09 +0200 (CEST) Cc: andre.albsmeier@mchp.siemens.de, freebsd-questions@FreeBSD.ORG X-Mailer: ELM [version 2.4ME+ PL43 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Content-Transfer-Encoding: 7bit Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > Andre Albsmeier wrote: > > > Pipe any exportable netscape 4.0x through the following program and > > you get strong encryption. That's what I do always with the 40-bit > > versions for HP-UX, FreeBSD, IRIX, SunOS and even Winblows. It keeps > > me from having to wait until fortify comes out... > > > > ---------------------- snip -------------------------- > > > > #!/usr/local/bin/perl -0pi > > s/BITS:.*/$_=$&;y,a-z, ,;s, {4}$,true,gm;s, 512,2048,;$_/es > > > > ---------------------- snap -------------------------- > > Can you give a more detailed explanation as to what you mean by "pipe > it through" and break down what this script does for us less perl andre@bali:~> the_prog_above < netscape-export > netscape-strong andre@bali:~> ./netscape-strong > literate types? It looks like a good deal, but I like to know what I'm > doing before I do it. :) Well, since I am no perl freak as well, I ran both netscape versions (before and after the patch) through hexdump -C and compared the output. The result appeared to be that all netscape versions contain the strong crypto code which is being enabled with the code above. It changes some occurences of "false" to "true" and some " 512" to "2048". If you got enough RAM, do the hexdump -C thing and the diff and you will see it. At least it works when looking at https://www.fortify.net/cgi-bin/ssl and https://mozilla-crypto.ssleay.org/cryptocheck.php after the patch. BTW, is there something like a "general purpose file editor" for FreeBSD? I would like to see something as I used to have in my Atari ST and DOS days... It would be enough to have something which has the same appearance of hexdump -C but with search, replace and primitive editing functionality. > > Thanks, > > Doug -Andre To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message