Re: Why should SPKAC-initiated certificates be stored in raw DERformat

2002-05-06 Thread Michael Sierchio

Richard Levitte - VMS Whacker wrote:
 I just noticed that when 'openssl ca' is used with '-spkac', the
 resulting ctificate is stored in raw DER format instead if PEM
 format.  Is there a logical reason for this, or is this another
 EAYism that noone understands today?

Since SPKAC was a Netscapism,  it's entirely possible that the
default representation was chosen to be DER because that's how
it must be returned to the browser.  IOW, I have no idea... ;-)

__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



OpenSSL 0.9.6d beta1

2002-05-06 Thread Neff Robert A

Make is halting for Windows users using the default compiler option
/WX - treat warnings as errors.

The following changes are necessary to successfully build under the
Win32 platform:

crypto/conf/conf_api.c
Change line 70 from
   #include e_os.h
to
   #include openssl/e_os.h

ssl/s3_pkt.c:
Change line 248 from
   if (extra != (s-s3-rbuf_len - SSL3_RT_MAX_PACKET_SIZE))
to
   if (extra != ((int)(s-s3-rbuf_len - SSL3_RT_MAX_PACKET_SIZE)))

ssl/s3_pkt.c:
Change line 608 from
   if (s-s3-wbuf_len  prefix_len + SSL3_RT_MAX_PACKET_SIZE)
to
   if ((int)s-s3-wbuf_len  prefix_len + SSL3_RT_MAX_PACKET_SIZE)

ssl/ssltest.c
Change line 853 from
   if (r  num)
to
   if (r  (int)num)

*
DISCLAIMER:   The information contained in this e-mail may be confidential
and is intended solely for the use of the named addressee.  Access, copying
or re-use of the e-mail or any information contained therein by any other
person is not authorized.  If you are not the intended recipient please
notify us immediately by returning the e-mail to the originator.
__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



[openssl.org #21] [no subject]

2002-05-06 Thread


Hello

I found your contact information while looking for information about B2B exchanges. I 
believe that I have came up with a fresh concept for creating communities for B2B  
exchanges with unlimited streaming video, audio and PowerPoint presentations. 

I am genuinely interested in your feedback. Please take a look at www.AdrenaMail.com. 
I am genuinly interested in your feedback.  Your feedback means a lot to me.

Thank You
David Evgey- President
AdrenaMail Corp.


__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



OpenSSL 0.9.6d beta1 (cont)

2002-05-06 Thread Neff Robert A

For Win32 users, when defining no-cast no-idea and/or no-rc5, the file
libeay32.def
still incorrectly includes references to said crypto functions.  I seem to
remember
discussion on this earlier, however I'm unaware if any of the devs have
looked into
this.  I apologize if I've missed a message outlining what corrective
measures, if any,
will be done.
Thanks,
Rob

*
DISCLAIMER:   The information contained in this e-mail may be confidential
and is intended solely for the use of the named addressee.  Access, copying
or re-use of the e-mail or any information contained therein by any other
person is not authorized.  If you are not the intended recipient please
notify us immediately by returning the e-mail to the originator.
__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Suggestion for smime.c

2002-05-06 Thread Ken Hirsch

There is a known issue about the input to smime -sign being a pipe.  Can
smime.c be changed so that it gives an error when it tries to rewind the
input?  Something like:
  if (BIO_reset(in) != 0  (flags  PKCS7_DETACHED)) {
BIO_printf(bio_err, Can't rewind input file\n);
goto end;
  }
(Diff w.r.t 0.9.6d-beta1 is attached)
This would have saved me some time tracking down the problem.

Thanks,
Ken Hirsch





smime.c.diff
Description: Binary data