1. Someone posted a complaint on comp.os.vms about a missing header file:
http://groups.google.com/group/comp.os.vms/browse_thread/thread/0887b1dfe5609d3f Apparently, "srtp.h" is new, and was not added to the list in "ssl/install-ssl.com", so it doesn't get put into the installation destination directory. The usual test procedure runs against the source+build tree, so a problem like this is not detected until the victim actually tries to use the stuff. I've written a DCL script which searches through all the header files in an OpenSSL "include" directory for "#include <openssl/" directives, and then checks for the existence of those files there. It might be worth incorporating something like this into the VMS installation procedure: http://antinode.info/ftp/openssl/1_0_1b/vms/test_headers.com ALP $ @ test_headers.com [.1_0_1B.include] [.1_0_1B.INCLUDE]srtp.h ALP $ write sys$output $status %X10018292 ALP $ exit %X18292 %RMS-E-FNF, file not found It wouldn't hurt, either, to build and run some simple program(s) using the just-installed stuff, instead of trusting the installation scripts. (But that could miss some of the problems which test_headers.com can find.) 2. Something seems to be wrong with the 64-bit-pointer build. The last test (TEST_CMS) with the 32-bit build does this: [...] encrypted content test streaming PEM format, 128 bit RC2 key: OK encrypted content test streaming PEM format, 40 bit RC2 key: OK encrypted content test streaming PEM format, triple DES key: OK encrypted content test streaming PEM format, 128 bit AES key: OK compressed content test streaming PEM format: OK ALL TESTS SUCCESSFUL. [...] The same test with the 64-bit build does this: [...] encrypted content test streaming PEM format, 128 bit RC2 key: OK encrypted content test streaming PEM format, 40 bit RC2 key: verify error %SYSTEM-F-ABORT, abort I haven't investigated it. OpenSSL 1.0.1b 26 Apr 2012 built on: 4-MAY-2012 19:47:54.87 platform: VMS ALPHA_64 V8.3 options: bn(64,64) md2(int) rc4(ptr,int) des(ptr,risc1,16,long) idea(int) blowfish(idx) compiler: /POINTER_SIZE=64 /DEFINE=ZLIB OPENSSLDIR: N/A I didn't see this problem with: OpenSSL 1.0.0h 12 Mar 2012 built on: 14-MAR-2012 00:22:59.46 platform: VMS ALPHA_64 V8.3 options: bn(64,64) md2(int) rc4(ptr,int) des(ptr,risc1,16,long) idea(int) blowfish(idx) compiler: /POINTER_SIZE=64 /DEFINE=ZLIB OPENSSLDIR: N/A ------------------------------------------------------------------------ Steven M. Schweda sms@antinode-info 382 South Warwick Street (+1) 651-699-9818 Saint Paul MN 55105-2547 ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager majord...@openssl.org