[openssl.org #3304] [PATCH] typo in SSL_get_peer_cert_chain docs

2014-05-01 Thread Matt Caswell via RT
Fixed in commit: http://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=e5676b8328a486565fc3c7f408a40beb4d47cd08 Matt __ OpenSSL Project http://www.openssl.org Development Mailing List

Re: [openssl.org #3336] 1.0.1g breaks IronPORT SMTP appliance (padding extension)

2014-05-01 Thread Viktor Dukhovni
On Thu, May 01, 2014 at 01:23:51PM -0400, John Foley wrote: > I'm trying to get that information from the IronPort team. In the mean > time, this bug report appears to have some details: > > https://tools.cisco.com/bugsearch/bug/CSCuo25329 Sadly, this requires a login. The bug is however refere

Re: [openssl.org #3336] 1.0.1g breaks IronPORT SMTP appliance (padding extension)

2014-05-01 Thread John Foley
I'm trying to get that information from the IronPort team. In the mean time, this bug report appears to have some details: https://tools.cisco.com/bugsearch/bug/CSCuo25329 On 05/01/2014 12:26 PM, Viktor Dukhovni wrote: > On Thu, May 01, 2014 at 12:08:50PM -0400, John Foley wrote: > >> This is a

Re: [openssl.org #3336] 1.0.1g breaks IronPORT SMTP appliance (padding extension)

2014-05-01 Thread Viktor Dukhovni
On Thu, May 01, 2014 at 12:08:50PM -0400, John Foley wrote: > This is a known problem in the Ironport TLS stack. Ironport has > released a hot patch to address this problem. Any links to the fix? I'd like to post a link to the fix to the Postfix and Exim users lists, so that if anyone runs into

Re: [openssl.org #3336] 1.0.1g breaks IronPORT SMTP appliance (padding extension)

2014-05-01 Thread John Foley
This is a known problem in the Ironport TLS stack. Ironport has released a hot patch to address this problem. On 05/01/2014 06:29 AM, Marcus Meissner via RT wrote: > Hi, > > SUSE has received a bugreport from a user, that the "padding" extension > change breaks IronPort SMTP appliances. > > Ther

Re: [openssl.org #3336] 1.0.1g breaks IronPORT SMTP appliance (padding extension)

2014-05-01 Thread Viktor Dukhovni
On Thu, May 01, 2014 at 01:26:48PM +0200, Stephen Henson via RT wrote: > > Workaround: Force protocol to SSLv3 or recompile without the define > > above. If there were an SSL_OP_ flag to allow applications to disable padding, that would be useful for SMTP applications. There is precious little p

Re: [openssl.org #3336] 1.0.1g breaks IronPORT SMTP appliance (padding extension)

2014-05-01 Thread Kurt Roeckx
On Thu, May 01, 2014 at 02:45:19PM +0200, Hanno Böck wrote: > On Thu, 1 May 2014 14:29:44 +0200 > Kurt Roeckx wrote: > > > On Thu, May 01, 2014 at 01:35:19PM +0200, Hanno Böck wrote: > > > > > > Maybe this should teach us a lesson: Adding more and more > > > Workarounds for broken stuff isn't th

Re: [openssl.org #3336] 1.0.1g breaks IronPORT SMTP appliance (padding extension)

2014-05-01 Thread Hanno Böck
On Thu, 1 May 2014 14:29:44 +0200 Kurt Roeckx wrote: > On Thu, May 01, 2014 at 01:35:19PM +0200, Hanno Böck wrote: > > > > Maybe this should teach us a lesson: Adding more and more > > Workarounds for broken stuff isn't the way to go forward. The way > > to go forward is to fix broken stuff. >

Re: [openssl.org #3336] 1.0.1g breaks IronPORT SMTP appliance (padding extension)

2014-05-01 Thread Kurt Roeckx
On Thu, May 01, 2014 at 01:35:19PM +0200, Hanno Böck wrote: > > Maybe this should teach us a lesson: Adding more and more Workarounds > for broken stuff isn't the way to go forward. The way to go forward is > to fix broken stuff. The problem isn't always to fix the broken stuff but ussually to ge

Re: [openssl.org #3336] 1.0.1g breaks IronPORT SMTP appliance (padding extension)

2014-05-01 Thread Hanno Böck
On Thu, 1 May 2014 13:26:48 +0200 "Stephen Henson via RT" wrote: > Ironically it was added as a workaround for another bug. The padding > extension was believed to have no side effects... obviously that > isn't true :-( Maybe this should teach us a lesson: Adding more and more Workarounds for br

[openssl.org #3336] 1.0.1g breaks IronPORT SMTP appliance (padding extension)

2014-05-01 Thread Stephen Henson via RT
On Thu May 01 12:29:58 2014, meiss...@suse.de wrote: > Hi, > > SUSE has received a bugreport from a user, that the "padding" > extension > change breaks IronPort SMTP appliances. > > There might a RT on this already, not sure. > > https://bugzilla.novell.com/show_bug.cgi?id=875639 > http://postfix.

Re: [openssl.org #3336] 1.0.1g breaks IronPORT SMTP appliance (padding extension)

2014-05-01 Thread Kurt Roeckx via RT
On Thu, May 01, 2014 at 12:29:58PM +0200, Marcus Meissner via RT wrote: > Hi, > > SUSE has received a bugreport from a user, that the "padding" extension > change breaks IronPort SMTP appliances. > > There might a RT on this already, not sure. > > https://bugzilla.novell.com/show_bug.cgi?id=8756

Re: [openssl.org #3326] [PATCH] expose -elapsed option of speed and include missing man pages references.

2014-05-01 Thread Kurt Roeckx via RT
On Wed, Apr 23, 2014 at 06:29:26PM +0200, John-Mark Gurney via RT wrote: > diff --git a/apps/speed.c b/apps/speed.c > index 9232418..f70fd3e 100644 > --- a/apps/speed.c > +++ b/apps/speed.c > @@ -1126,9 +1126,7 @@ int MAIN(int argc, char **argv) > > BIO_printf(bio_err,"\n");

[openssl.org #3336] 1.0.1g breaks IronPORT SMTP appliance (padding extension)

2014-05-01 Thread Marcus Meissner via RT
Hi, SUSE has received a bugreport from a user, that the "padding" extension change breaks IronPort SMTP appliances. There might a RT on this already, not sure. https://bugzilla.novell.com/show_bug.cgi?id=875639 http://postfix.1071664.n5.nabble.com/OpenSSL-1-0-1g-and-Ironport-SMTP-appliances-inte

Re: [openssl.org #3294] [PATCH] Documentation for PKCS5_PBKDF2_HMAC

2014-05-01 Thread Kurt Roeckx
On Sat, Apr 05, 2014 at 05:42:16PM +0200, noloa...@gmail.com via RT wrote: > A question using PKCS5_PBKDF2_HMAC was recently asked on Stack > Overflow. Currently, there is no documentation on the function. > > The PKCS5_PBKDF2_HMAC.pod is new. It is based on the documentation for > EVP_BytesToKey.

Re: [openssl.org #3310] Can't execute make command

2014-05-01 Thread Kurt Roeckx via RT
On Mon, Apr 14, 2014 at 09:52:32PM +0200, Maria Moskaleva via RT wrote: > Hello! "Make" fails, wihle I'm trying build the openssl library. > http://screeny.ru/534bd10369000fff1f0225ce > Why have I problem with md2test.c? (m2test.c:1: parse error before '.' > token) > What should I do? Thanks in adv