Re: [PATCH] Change needed for "-DPURIFY" builds.

2010-01-11 Thread Dr. Stephen Henson
On Mon, Jan 11, 2010, Kevin Regan wrote: > Hi Dr. Henson, > > I noticed instructions in the README to send the patch to the openssl-dev > mailing list. Where can I find this request tracker? > Sending it to rt-b...@openssl.org will result in it appearing in the request tracker. More details a

RE: [PATCH] Change needed for "-DPURIFY" builds.

2010-01-11 Thread Kevin Regan
Hi Dr. Henson, I noticed instructions in the README to send the patch to the openssl-dev mailing list. Where can I find this request tracker? Thanks, Kevin -Original Message- From: owner-openssl-...@openssl.org [mailto:owner-openssl-...@openssl.org] On Behalf Of Dr. Stephen Henson Sen

Re: Get root certificates from System Store of Windows

2010-01-11 Thread Dr. Stephen Henson
On Mon, Jan 11, 2010, NARUSE, Yui wrote: > (2010/01/10 23:23), Shahin Khorasani wrote: > > try this > > (snip) > > Thanks, it works. > > > So I request X509_STORE_set_default_paths call this. > When this is merge, both Unix user and Windows user can use > the system's default root certificates.

Re: [PATCH] Change needed for "-DPURIFY" builds.

2010-01-11 Thread Dr. Stephen Henson
On Mon, Jan 11, 2010, Kevin Regan wrote: > Any further thoughts on this patch? I'd love to get these -DPURIFY builds > working properly. > Please send the patch to the request tracker. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: h

[PATCH] Change needed for "-DPURIFY" builds.

2010-01-11 Thread Kevin Regan
Any further thoughts on this patch? I'd love to get these -DPURIFY builds working properly. --Kevin crypto/rand/randfile.c : @@ -102,6 +102,14 @@ if (file == NULL) return(0); +#ifdef PURIFY +/* struct stat has padding and unused fields that may not be + * initialized i

Re: Get root certificates from System Store of Windows

2010-01-11 Thread NARUSE, Yui
(2010/01/10 23:23), Shahin Khorasani wrote: > try this > (snip) Thanks, it works. So I request X509_STORE_set_default_paths call this. When this is merge, both Unix user and Windows user can use the system's default root certificates. I should file this to Request Tracker as a bug? (even if thi

[openssl.org #2136] Add display of old-style (MD5) subject/issuer hash to x509 command

2010-01-11 Thread Willy Weisz via RT
This is an enhancement request that addresses an incompatibility introduced with the new SHA1-based hashing of the subject/issuer name defined in openssl 1.0.0. The necessary patches based on openssl 1.0.0-beta4 are attached. Reason for the request: The change forces sites, that distribute informa

Re: [openssl.org #2135] [patch] fix few LIBDIR refs in engines/

2010-01-11 Thread Mike Frysinger via RT
On Sunday 10 January 2010 21:53:03 Mike Frysinger wrote: > openssl-1.0.0-beta4 and the openssl-1.0.0-stable branch are still using > "/lib/" instead of "/$(LIBDIR)/" in a few places. there is also a missing ref in the top level Makefile.org -mike Index: Makefile.org ==

[openssl.org #2135] [patch] fix few LIBDIR refs in engines/

2010-01-11 Thread Mike Frysinger via RT
openssl-1.0.0-beta4 and the openssl-1.0.0-stable branch are still using "/lib/" instead of "/$(LIBDIR)/" in a few places. -mike Index: engines/Makefile === RCS file: /usr/local/src/openssl/CVSROOT/openssl/engines/Makefile,v retrieving

Re: [openssl.org #2128] PKCS12_PBE_add is a noop but maybe it should add the algorithms?

2010-01-11 Thread Jouni Malinen
On Tue, Dec 15, 2009 at 10:18 AM, Tomas Mraz via RT wrote: > If you call just SSL_library_init() and PKCS12_PBE_add some pkcs12 files > will not be loadable and moreover the openssl will crash due to missing > checks for ciphers not found. I've reported the crash in a separate > report. Perhaps th