Re: Problem using SSL_set_verify with a callback

e SSL_CTX is being used. The verify_callback you supplied to the SSL object is stored into the object, but it is actually never used. This seems to be a bug :-) I'll have to go through this again to make sure that I did not miss anything and then consider the best stra

Re: Problem using SSL_set_verify with a callback

to the openssl-source and test again? It should bring the behaviour up to the state of the documentation :-) Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/ Lehrstuhl Allgemeine Elekt

Re: Want to use certs and keys in memory instead of file

i_X509() function to transfer the contents of this array into the X509 and load it using SSL_CTX_use_certificate(). (OpenSSL rsa does not have a -C option, so transferring it into an array is left as an exercise to the reader :-) Best regards, Lutz -- Lutz Jaenicke

Re: cvs commit: openssl/crypto/dsa dsa_lib.c

on Solaris 8 this seems not to be done automatically > > + (in contradiction to the requirements of the C standard). > > + This made problems when used from OpenSSH. > > + [Lutz Jaenicke] > > I really don't believe this! Are you sure? Have you get a

Re: Problem using SSL_set_verify with a callback

his morning to find out how to handle the libeay.num thing "the official way". Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/ Lehrstuhl Allgemeine Elektrotechnik

Re: Want to use certs and keys in memory instead of file

n tell, i must be missing something There is a manual page for SSL_CTX_use_certificate in my copy of OpenSSL. A manual page for d2i_X509 does not exist, but the handling of all d2i_* functions is similar, so you can use the description of d2i_SSL_SESSION. Good night, Lutz

Re: Return string typos in SSL_state_string_long()

typos are left even in OpenSSL 0.9.6b. Thanks, has been fixed. Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/ Lehrstuhl Allgemeine Elektrotechnik Tel. +49 355 6

Re: Question about arguments checking

ial meaning, it is handled accordingly.) Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/ Lehrstuhl Allgemeine Elektrotechnik Tel. +49 355 69-4129 Universitaetsplatz 3-4,

Re: [PATCH] Bug fixes for BIO_get_num_renegotiates() and BIO_get_write_buf_size()

On Thu, Aug 16, 2001 at 09:15:36AM -0500, Stephen Hinton wrote: > This is the first patch I've submitted for OpenSSL. Feedback about what I > did wrong (and what I did right) is appreciated. Well done. Patches have just been applied. Best regards, Lutz -- Lu

SSL_COMP_* API

anybody have an idea on why this distinction is being made? It doesn't make sense to me. (If nobody has an idea on why it should not be public, I will make it public.) Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.a

Re: 0819 snapshot problem

did check in the version from the wrong directory. One better should not work on Sundays. (fixed) Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/ Lehrstuhl Allgemeine Elektrotechni

Re: cvs commit: openssl/doc/ssl SSL_COMP_add_compression_method.pod ssl.pod

nsequence of all the drawbacks the actual setup has... I will add an appropriate note tomorrow. Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/ Lehrstuhl Allgemeine Elektrotechnik

Re: OPenSSL fails to accept certificate chains over 16K

e. With certificates typically having a size of 1-2kB this would mean a chain length of ... And it also means that 100kB are on the wire even before any payload is handled... > The SSLv3 specs don't set this limit, but rather allows 2^24 certificates. > I understand the need to

Re: SunOS gcc build patch

6b. Thanks, applied! Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/ Lehrstuhl Allgemeine Elektrotechnik Tel. +49 355 69-4129 Universitaetsplatz 3-4, D-03044 Cottbus Fax

Re: OPenSSL fails to accept certificate chains over 16K

On Fri, Aug 24, 2001 at 06:31:56PM -0700, Doug Kaufman wrote: > On Fri, 24 Aug 2001, Lutz Jaenicke wrote: > > > On Thu, Aug 23, 2001 at 02:21:27PM -0500, Douglas E. Engert wrote: > > > ! #if defined(MSDOS) && !defined(WIN32) > > > !

Re: bug in OpenSSL ssl\s3_clnt.c: SSL handshake fails

. This problem has been fixed in the CVS tree on August 7, 2001 and the fix will therefore be part of the next release. Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/ Lehrstuhl

Re: [PATCH] for 0.9.67b shared libraries on HPUX using GCC and native ld

There exists an undocumented -Fl option (at least on 10.20). -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/ Lehrstuhl Allgemeine Elektrotechnik Tel. +49 355 69-4129 Universitaetsplatz 3-4,

Re: OPenSSL fails to accept certificate chains over 16K

On Sat, Aug 25, 2001 at 01:59:24PM +0200, Lutz Jaenicke wrote: > I'll add it to the TODO list. If we change this to a dynamic limit, > we could start with 16kB (platform independant) and then applications > may decide at will. 16kB should be sufficient in most cases, because >

Re: [PATCH] Compiling as shared library on HP-UX 11.XX

ackported the shared library support from 0.9.7-dev to 0.9.6x? Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/ Lehrstuhl Allgemeine Elektrotechnik Tel. +49 355 69-4129 Universitaets

Re: function declarations with no parameter specifications

ical reasons?) The time the OpenSSL team members can spend on the project is limited. If you can supply a patch, we will strongly consider applying it :-) Please only take care of the current development snapshot (0.9.7-dev). The development for 0.9.6c is more or less finished and for compatibility r

Re: [patch] 0.9.6b: Allow loading of uninstalled shared libraries

. There are reasons, why the shlib/hpux10-cc.sh is looking somewhat complicated (besides building with +O4=optimization at link time)... Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.DE/persone

Re: RAND_add() and the entropy...

ctor is one indicator. If we choose a value of 0, we mean that there may be entropy in it, but maybe an attacker can predict the value, so we use it but do not count it as a really unpredictable input. Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cott

Re: RAND_add() and the entropy...

On Wed, Nov 14, 2001 at 10:59:57AM -0800, Michael Sierchio wrote: > Lutz Jaenicke wrote: > > > The entropy parameter should tell, how much "uncertainty" is in the > > data provided. > > > If we choose a value of 0, we mean that there may be entropy in it,

Re: Documentation of SSL_get1_session()

lled until the the reference count >has reached 0. Thanks, I have rephrased the corresponding paragraph. Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/ Lehrstuhl Allgemeine Elektrote

Re: Creating PEM file from peer cert

ical API SSL_get_peer_certificate(), SSL_get_peer_cert_chain() to obtain the X509 objects. You can then simply write them to file using the PEM_write_X509()/PEM_write_bio_X509() function. Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.ae

Re: session reuse from client side

eing resumed. The OpenSSL client does set the cipher based on this returned value. It is therefore not necessary to set the cipher in advance. Do you have any problems due to this behaviour? Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECT

Re: Creating PEM file from peer cert

y > against the saved file. However, it still complains in > verify_callback that peer cert by server is untrusted. Ah! For the verification to succeed, you must capture the CA chain including the root certificate. OpenSSL's verification routines by now do not allow single peer cer

Re: Creating PEM file from peer cert

k(), but I don't have a code sample. If I remember correctly I discussed this issue publicly on this list some time ago. I do use Konqueror at home and it does seem to support peer certificate checking, so you may want to check out the Konqueror source. Best regards, Lutz -- Lu

Re: verify(1) man page

be changed to all lower case for consistency with > other messages. Will be fixed in a minute. Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/ Lehrstuhl Allgemeine Elektrot

Re: problem in s_client -- comments on fix?

better suited to your needs, as it is intended for application and not for testing? Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/ Lehrstuhl Allgemeine Elektrotechnik

Re: problem in s_client -- comments on fix?

client you are most welcome to post it to this list :-) Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/ Lehrstuhl Allgemeine Elektrotechnik Tel. +49 355 69-412

Re: problem in s_client -- comments on fix?

On Tue, Oct 16, 2001 at 02:30:03PM +0100, Adam Back wrote: > On Sun, Oct 14, 2001 at 06:19:30PM +0200, Lutz Jaenicke wrote: > > [...] > > > > * If you have any patch to submit that will improve the behaviour of > > s_client you are most welcome to post it to this li

Re: bug and solution wrt SSL_set_verify()

time of the call was used. New function X509_STORE_CTX_set_verify_cb() introduced to allow the necessary settings. [Lutz Jaenicke] The fix will be available in 0.9.6c (due out in the next days!?) and 0.9.7. Nevertheless: thanks for your effort! Best regards, Lutz -- Lut

Re: platform hpux-m68k-gcc

k version of HP-UX, so it should be detectable... Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/ Lehrstuhl Allgemeine Elektrotechnik Tel. +49 355 69-4129 Univer

Re: argument to app_verify_callback function

this list. One advantage of mailing lists is that they can be very informative and stimulating, because you get an insight into other peoples work. Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.D

Re: segmentation violations and bus errors with OpenSSL and OpenSSH

an arbitrary number fixes a problem, there is a bug around that must be fixed. Just increasing buffer allocations only hides the problem, it does not solve it. Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Co

Re: Clarification??

On Thu, Dec 13, 2001 at 10:06:45AM +0100, Srikanta Nayak wrote: > How openSSL will looks EGD ? Is there any such documentation available on net >related to it? http://www.openssl.org/support/faq.html#USER1 Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU C

Re: prob using the d2i_x509_fp();

ssing, as they have already been read by PEM_read_X509(). Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/ Lehrstuhl Allgemeine Elektrotechnik Tel. +49 355 69-4129 Univer

Re: how to know key size of symmetic alg. after ssl nego.?

_name man ciphers (-v option) Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/ Lehrstuhl Allgemeine Elektrotechnik Tel. +49 355 69-4129 Universitaetsplatz 3-4, D-0304

Re: client authentication prob

fication) or "0" (verification failure). Only when ok is set to 0, the return value of X509_STORE_CTX_get_error(ctx); is significant. If not sure, you should start without a callback function and see, whether the certificate verification fails (it should). Best regards,

Re: EAP-TLS

egards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/ Lehrstuhl Allgemeine Elektrotechnik Tel. +49 355 69-4129 Universitaetsplatz 3-4, D-03044 Cottbus

Re: Bug on 9000/879-hp-hpux10

"+O4" it during the finale link stage. And, please patch up your compiler to the latest patchlevel. You can download the patches for free and I really had problems at high optimization levels that went away with the latest patchlevels. Best regards, Lutz -- Lutz Jaenicke

Re: starttls

using one of the available OpenSource RFC2487 implementations. You can start with mine at http://www.aet.tu-cottbus.de/personen/jaenicke/postfix_tls and by having a look into my references you can check the others. Regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTE

Re: SSL Cipher Suites

1:24 ws01 postfix/smtp[26638]: TLS connection established: TLSv1 with cipher EXP1024-RC4-SHA (56/128 bits) Oct 7 19:01:24 ws01 postfix/smtp[26638]: 4C18F82BB: to=<[EMAIL PROTECTED]>, relay=serv01.aet.tu-cottbus.de[141.43.132.161], delay=1, status=sent (250 Ok: queued as DBB0

Re: SSL Cipher Suites

On Wed, Oct 13, 1999 at 06:29:32PM +0200, Lutz Jaenicke wrote: > > Speaking of which, now that Netscape (at least) ship a client that > > supports the new 56/1024 bit ciphersuites, should we switch them on? > > Hmm, I tried them and they did work with Netscape. > I however a

Re: SSL Cipher Suites

On Thu, Oct 14, 1999 at 10:32:20AM +0200, Lutz Jaenicke wrote: > From the source code I think, part of the problem is the "exportable" check > with SSL_IS_EXPORT (and derivatives of this macro), since there is a > EXPORT56 check macro available, but I don't see it actuall

Re: SSL Cipher Suites

g into it even deeper, sigh. Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/ Lehrstuhl Allgemeine Elektrotechnik Tel. +49 355 69-4129 Universitaetsplat

Re: SSL Cipher Suites

On Thu, Oct 14, 1999 at 10:54:12AM +0100, Ben Laurie wrote: > Lutz Jaenicke wrote: > SSL_IS_EXPORT checks for either, so this isn't the problem. Ok, spend some more hours walking through ssl_ciph.c and I think by now I do know what is going on :-) When assembling the list of ciphers,

Proposing extension of SSL_CIPHER (ssl.h)

break binary compatibility (and this should be done as seldom as possible), I would like to hear opinions and maybe proposals for further improvements/enhancements. Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU

Re: Proposing extension of SSL_CIPHER (ssl.h)

t stuff can download the patch at ftp://ftp.aet.tu-cottbus.de/pub/postfix_tls/related/openssl-patch/ Best regards, Lutz Jaenicke -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/ Lehrstuhl Allge

Certificate verification after session reload

. Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/ Lehrstuhl Allgemeine Elektrotechnik Tel. +49 355 69-4129 Universitaetsplatz 3-4, D-03044 Cottbus Fax

Re: X509_NAME_ENTRY problems

e() and a lot of other similar routines, where you of course have to take care of your pointers yourself. Regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/ Lehrstuhl Allgemeine Elektrotechnik

Re: Trouble verifing server cert from CA certs in client...

ded in CAfile are listed to the client as available for checking. You can however influence this list using the SSL_CTX_set_client_CA_list() call. (From memory, hopefully I got it right :-). Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Co

Re: make fails

fig no-asm does nothing. using an updates RH 6.0 box On my SuSE 6.2 I have: /usr/include/asm -> ../src/linux/include/asm-i386 So the kernel sources must be installed. Probably the same is true for RH 6.0 (even though my errno.h and bits/errno.h seem to be different and to not require asm/er

Submittal of "56bit cipher handling patch"

ch was partly inspired by Ben Laurie in private communication. Best regards, Lutz Jaenicke -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/ Lehrstuhl Allgemeine Elektrotechnik

Re: Submittal of "56bit cipher handling patch"

ook me longer to reverse engineer the old function than rewriting it... - Then AUDIT the complete OpenSSL package itself :-) Since I write software using the OpenSSL library and the documentation (users/API) is ... thin, I have to go directly to the code sometimes: I don't want to have to

Re: Submittal of "56bit cipher handling patch"

On Tue, Dec 14, 1999 at 01:58:17PM +0100, Ulf Möller wrote: > On Tue, Dec 14, 1999 at 10:20:47AM +0100, Lutz Jaenicke wrote: > > > - There is (unfortunately) no "official" way to submit bug reports or patches > > listed. There is openssl-bugs, which is however gate

[patch] "56bit cipher handling patch" Version B.03

into an endless loop. Reproduce with "openssl s_server -cipher DEFAULT:=aRSA". I have appended the README for the complete patch and attached the patch itself and its PGP signature file. Regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus

SSL_get_shared_ciphers() question/bug report

n evaluation of the available certs, because this further restricts the available certificates, see ssl3_choose_cipher(). Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/

[patch] "56bit cipher handling patch" Version B.04

names beginning with "ADH", e.g. "ADH-DES-CBC-SHA". The length must also be checked. Please find attached the fixed version B.04. Best regards, Lutz Jaenicke -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU

crypto/pkcs7/Makefile.ssl does not remove testapps

Hi, in crypto/pkcs7/Makefile.ssl a "make clean" leaves over the testapps "enc", "dec", "sign", and "verify". Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-

Compilation of latest SNAPSHOT on HP-UX

?? Otherwise the default should not be +O4 or +O3 in order to avoid complaints... Best regards, Lutz PS. I checked my archive, similar information was posted by "anonymous" on Date: Mon, 8 Nov 1999 17:59:37 +0100 (CET) Message-Id: <[EMAIL PROTECTED]> From: Anonymous <[EMAIL PR

Re: Compilation of latest SNAPSHOT on HP-UX

sult as of now: +O3 and +O4 do not work on HP-UX 10.20 (and probably with 11.0) as of the latest snapshots, even with tons of memory. Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.DE/perso

Re: Compilation of latest SNAPSHOT on HP-UX

s in SHA_ARRAY at rmd_dgst.c:295, including your respective comment... As of now the "ccom" has spend 12 minutes on this file, I will leave it running for some more time. Maybe it will terminate, but I guess it won't. Best regards, Lutz -- Lutz Jaenicke

Re: Compilation of latest SNAPSHOT on HP-UX

_XARRAY in "Configure" so that the mechanism is visible and documented. My experience with "magically" obtained machinery/compiler properties are not the best and tracing through the source and/or a "machdep.h" to find out what alternative of the code is used dep

Re: Compilation of latest SNAPSHOT on HP-UX

enssl with shared libraries. I have extended it a bit so that I run +O4 shared libs and apps with +O3 static libs, since the shared libs are optimized while building the libs, so the actual linking to applications is fast. It might take some minutes more tweaking before I can re-publish

SubjectAltName not printed by apps/ca.c

uer before before signing. (I just started experimenting with dNSName usage and don't feel confident enough to already provide a patch myself). Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.DE/pe

[BUG] Snapshot 20000224 EGD problems

tot+=RAND_egd(n); tot+=RAND_load_file(n,1024L*1024L); Hence, "tot" will yield "-1": ws01 222: ./openssl genrsa -out somekey.pem -rand /does/not/exist -1 semi-random bytes loaded Generating RSA private key, 512 bit long modulus ... Best regards, Lutz -- Lutz Jaeni

Re: Bug !!!!!

) Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/ Lehrstuhl Allgemeine Elektrotechnik Tel. +49 355 69-4129 Universitaetsplatz 3-4, D-03044 Cottbus Fax.

0.9.5-beta1 success on HP-UX 10.20

-DBN_DIV2W -DMD32_XARRAY Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/ Lehrstuhl Allgemeine Elektrotechnik Tel. +49 355 69-4129 Universitaetsplatz 3-4, D-03044

Re: [ANNOUNCE] OpenSSL 0.9.5 beta2 available

yes, I know its old :-) Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/ Lehrstuhl Allgemeine Elektrotechnik Tel. +49 355 69-4129 Universitaetsplatz 3-4, D-03044

Re: [ANNOUNCE] OpenSSL 0.9.5 beta2 available

; Out of curiosity, which version of HP-UX? 10.20 Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/ Lehrstuhl Allgemeine Elektrotechnik Tel. +49 355 69-4129

Re: random number generator:SSLEAY_RAND_BYTES:prng not seeded:md_rand.c:476

to seed the PRNG. Hey, OpenSSL maintainers, please put a big red sticker onto the HTML-pages or even let an extra window pop up with this hint :-) Otherwise I already predict the major topic in the OpenSSL mailing lists for the next days... Best regards, Lutz -- Lutz Jaeni

HP-UX shared lib support

-DMD32_XARRAYBN_LLONG DES_PTR DES_UNROLL DES_RISC1:::", This is the same target as in hpux-parisc-cc, but +O3 replaced with +O4. I cannot work around it with Configure call, since the flags passed are _prepended_ and so the +O3 in Configure would win... Best regards, Lu

Re: HP-UX shared lib support

quot; message per line, but well, I don't do it that often. There is another warning about building shared libraries with optimization > +O2 anyway :-) Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbu

Re: HP-UX shared lib support

-> libssl.so.1 -r-xr-xr-x 1 root sys 283806 Mar 1 13:38 libssl.so.1 -r--r--r-- 1 root sys 341268 Mar 1 13:38 libssl_pic.a Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.ae

Re: Compilation of latest SNAPSHOT on HP-UX

BTW, what are > you used to, config or Configure? Note that there're new unified config > lines, namely hpux-parisc-cc, hpux-parisc-gcc and hpux64-parisc-cc. Ok, I have just checked hpux-parisc-cc and it does compile without problem. Best regards, Lutz -- Lutz Jaenicke

Re: Compilation of latest SNAPSHOT on HP-UX

On Mon, Feb 14, 2000 at 09:58:43PM +0100, Ulf Möller wrote: > On Sun, Feb 13, 2000 at 08:27:13PM +0100, Lutz Jaenicke wrote: > > > tomorrow morning. I typically call Configure directly, because the "perl" > > in the default path is perl4 and a "perl5 Config

Possible typo (with bug) in crypto/asn1/asn1_lib.c

*x) { return ASN1_STRING_data(x); } Probably there was meant: { return M_ASN1_STRING_data(x); } ??? Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/ Lehrstuhl Allgemeine Elektrotech

SNAP-20000216: minor correction and HP-UX 10.20 report

and s_server seem to work (next thing to try will be Postfix/TLS). Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/ Lehrstuhl Allgemeine Elektrotechnik Tel. +49 355 6

Latest SNAPSHOT, 2 questions

querying it being quite simple. a. Could you thing of including EGD support into the apps/? b. Can you give recommondations on the number of bytes needed to seed the PRNG? Consider me using EGD Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED

[BUG] Reading CAfile returns wrong result with more than one cert

ed, an erronous error is reported. Proposed fix: change the failure condition to if (X509_LOOKUP_load_file(lookup,file,X509_FILETYPE_PEM) <= 1) return(0); Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus h

Re: Latest SNAPSHOT, 2 questions

is based on) return 0? I tracked it down this morning, it is in x509_d2.c. Please check for a mail in openssl-dev named [BUG] Reading CAfile returns wrong result with more than one cert Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus

Re: Can't have SSL with multiple domain names on a single server...

quite uncomfortable with OpenSSL since the openssl.cnf file must be changed according to the certificate you want to generate. One can have more than one dNSName field, but then the cnf file must have the number of dNSName fields reserved!? Best regards, Lutz -- Lutz Jaenicke

[BUG?] Length of random pool missing from rand.h

e macro like #define RAND_POOL_LENGTH 1024 to rand.h. Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/ Lehrstuhl Allgemeine Elektrotechnik Tel. +49 355 69-4129 Unive

Re: Problems in recent snapshot

gt; a single byte in return to the Client Hello (same problem with OpenSSL > 0.9.4, and with Netscape). Hi, I have just tried it with latest SNAPSHOT on HP-UX 10.20. Could reproduce the problems. Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU

Re: Problems in recent snapshot

On Wed, Feb 23, 2000 at 06:45:46PM +0100, Bodo Moeller wrote: > On Wed, Feb 23, 2000 at 02:32:32PM +0100, Lutz Jaenicke wrote: > > I have just tried it with latest SNAPSHOT on HP-UX 10.20. > > Could reproduce the problems. > > www.rsasecurity.com does not count because th

Shared libraries for HP-UX 10.20

Maybe you can include the script and makefile into shlib/ or decide to implement a "contrib/" hierarchie. Best regards, Lutz PS. And don't forget, that the basic idea is from anonymous, not mine :-) -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cot

OpenSSL mail server issues

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi! Due to a misunderstanding within the OpenSSL team we ran into trouble with our mail and mailing service still hosted at the old server (hopefully I will be able to complete the migration to the new server over the Christmas break). Caused by a so

Re: Fwd: ccs received early

On 06/11/2014 11:10 PM, Kurt Roeckx wrote: > I still didn't get a reply from RT, so I'm just going to forward > this for now. > > > Kurt > Hmm. It at least does not show up in the mail log of the system hosting RT... Ah, I now see why: it is addressed to r...@debian.org... Since you attached th

Re: [PATCH] Advance to the next state variant when reusing messages

On Mon, Nov 10, 2014, Piotr Sikora wrote: > (for some reason it was never received by rt@, so resending here) Slipped through the moderation queue, sorry. It is in RT now. Best regards, Lutz -- Lutz Jaenicke jaeni...@openssl.org OpenSSL Project http://www.openssl.

Re: [openssl-dev] Submitting new bugs to rt via mail broken?

On Mon, Feb 23, 2015 at 11:53:17AM +0100, Rainer Jung wrote: > Am 10.02.2015 um 21:30 schrieb Matt Caswell: > > >On 10/02/15 19:23, Rainer Jung wrote: > >>Hello everyone, > >> > >>I sent a mail to r...@openssl.org 3 days ago, subject "OpenSSL 1.0.2 "make > >>test" bus error in evp_test (Solaris 10

[openssl.org #17] enahancement request - support intel icc for building

[[EMAIL PROTECTED] - Wed May 1 20:09:16 2002]: > I we compile with intel icc using intels math library libimf.a, it would > probably boost performance a lot. > > Intel's compiler version 6.0 is available for non commercial use. Hmm. Should not be too difficult to create a new entry for "Conf

[openssl.org #16] openssl-engine-0.9.6d-beta1 crypto/Makefile.ssl patch

[[EMAIL PROTECTED] - Wed May 1 12:20:35 2002]: > ! echo " #define DATE \"`date`\""; \ > ! echo " #define DATE \"`LC_TIME=C date`\""; \ Is anybody aware of a platform on which this would cause trouble? Best regards, Lutz

[openssl.org #18] missing semicolon in Makefile.org

I have added the missing ";" for 0.9.7-dev and -dev. We had no reports for 0.9.6d-beta1, even though the problem seems to be in it, too. I however don't want to break that version just minutes before it is released. Best regards, Lutz _

[openssl.org #26] 64 bit Suse Linux on PowerPC

[[EMAIL PROTECTED] - Thu May 9 22:13:32 2002]: > I am trying to compile on a 64 bit Suse sles7 powerpc system. > the error message indicates > > -m486 > > is an invalid compiler parameter. Anyone know the parameters I need to give > ./config to > get it to work for 64 bit Suse on a powerpc???

[openssl.org #26] 64 bit Suse Linux on PowerPC

Thanks. I have added a corresponding entry into "config". Please check out a new snapshot for correct behaviour. Best regards, Lutz __ OpenSSL Project http://www.openssl.org Development M

[openssl.org #29] -Wl,-Bsymbolic in 0.9.6d broke shared builds

[[EMAIL PROTECTED] - Sun May 12 22:48:56 2002]: > JFYI, when updating our package from 0.9.6c to 0.9.6d I've noticed > that the new shared libcrypto library doesn't work anymore. The > openssl(1) binary wouldn't recognize any of the block ciphers. I > tracked this down to the addition of -Wl,-

[openssl.org #37] Server-Client (SSL & nonSSL)

[[EMAIL PROTECTED] - Wed May 15 13:25:14 2002]: > Hi! > > i use Your project in my Client-Server project. > For example, my Server calls BIO functions to use opened socket > for handshaking , after that init_ssl_connection and everything works fine. > But what will happen if i'll try to use cli

[openssl.org #38] doc bug in doc/apps/x509.pod

Thanks, I have fixed the problem. I have found the missing =over 4 directly before the =back. Best regards, Lutz __ OpenSSL Project http://www.openssl.org Development Mailing List

<    1   2   3   4   5   6   7   8   >