Processed: Re: Bug#844303: Working on it porting ncrack to OpenSSL 1.1

2017-12-13 Thread Debian Bug Tracking System
Processing control commands:

> tag -1 help patch
Bug #844303 [src:ncrack] ncrack should switch to OpenSSL >= 1.1 at some point
Added tag(s) patch and help.

-- 
844303: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=844303
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#844303: Working on it porting ncrack to OpenSSL 1.1

2017-12-13 Thread Hilko Bengen
Control: tag -1 help patch

I have submitted two patches upstream:

(1) https://github.com/nmap/ncrack/pull/34 contains a simple patch for
opensshlib/configure.ac that sets OPENSSL_API_COMPAT in the various
test programs, enabling compatibility macros for deprecated function
names such as SSLeay_version().

(2) https://github.com/nmap/ncrack/pull/35 contains the commit that
enables building with OpenSSL 1.1, by applying many changes that
replace direct struct access with getter/setter functions.

Unfortunately, the ncrack sources seem to contain no automated tests.
Any advice on how to test the affected bits of the code is appreciated.

Cheers,
-Hilko



Bug#844303: Working on it porting ncrack to OpenSSL 1.1

2017-12-12 Thread Marcos Fouces
Hello Hilko!

Great news!


El 11/12/17 a las 01:14, Hilko Bengen escribió:
> Hi,
>
> just a heads-up: I am working on porting ncrack to OpenSSL 1.1. There
> are two main causes of issues:
>
> (1) OpenSSL-related checks in opensshlib/configure.ac are broken, they use
> old SSLeay_* APIs, this is fixed easily.
>
> (2) The usual getter/setter mess. There's a lot of code and in
> opensshlib/ that needs to be touched. Since this is more than just
> search/replace, I'll try to get my patch reviewed by upstream before
> making updates to the Debian package.
>
> Cheers,
> -Hilko
>
>
>



Bug#844303: Working on it porting ncrack to OpenSSL 1.1

2017-12-10 Thread Hilko Bengen
Hi,

just a heads-up: I am working on porting ncrack to OpenSSL 1.1. There
are two main causes of issues:

(1) OpenSSL-related checks in opensshlib/configure.ac are broken, they use
old SSLeay_* APIs, this is fixed easily.

(2) The usual getter/setter mess. There's a lot of code and in
opensshlib/ that needs to be touched. Since this is more than just
search/replace, I'll try to get my patch reviewed by upstream before
making updates to the Debian package.

Cheers,
-Hilko