Blutige Selbstjustiz

2005-05-14 Thread Lutz . Jaenicke
Polizeiexperten warnen: Ethnisch abgeschottete Mafia-Clans sind kaum noch zu 
durchdringen. Die Gerichte tragen Mitschuld.

Weiter auf:
http://www.libasoli.de/2004/ethnoclans%20spiegel50_04.html
__
OpenSSL Project http://www.openssl.org
Development Mailing List   openssl-dev@openssl.org
Automated List Manager   [EMAIL PROTECTED]


0.9.8 API/ABI compatibility with 0.9.7 ?

2005-05-14 Thread Eduardo Pérez
I was wondering if openssl-0.9.8 is going to be API/ABI compatible
with the current stable branch of openssl-0.9.7
I think keeping API/ABI compatible is a good idea and makes programmer
and users life easier.
Anyway, if you are not going to keep API/ABI compatibility in
openssl-0.9.8 with 0.9.7 I'd like to hear the reasoning behind that.
__
OpenSSL Project http://www.openssl.org
Development Mailing List   openssl-dev@openssl.org
Automated List Manager   [EMAIL PROTECTED]


Re: [openssl.org #1020] [PATCH] restore pkcs12 -CSP in 0.9.8

2005-05-14 Thread [EMAIL PROTECTED] via RT

Thanks very much for replying back Steve, I'd much appreciate whatever
you can do here because we need the 0.9.8 features but also need to be
able to set the CSP name in order for certificates to be imported
correctly into Windows servers.

Thanks,

Evan

On 5/13/05, Stephen Henson via RT <[EMAIL PROTECTED]> wrote:
> 
> [EMAIL PROTECTED] - Sun Mar  6 19:39:25 2005]:
> 
> > Hi,
> >
> > Somewhen between 0.9.7 and 0.9.8 (I first noticed it around 6 months
> > ago),
> > PKCS12 creation was refactored, and the new code left out the pkcs12
> > -CSP
> > implementation (the option is still accepted, but does nothing
> > useful).  I'm
> > not sure if this was intentional or not, but I didn't see that any
> > mention
> > of removing the -CSP function in the ChangeLog.
> >
> 
> No it wasn't intentional, thanks for the report.
> 
> > I wrote a patch to add back in CSP support to 0.9.8 (please see
> > attached) by
> > cut-and-pasting the missing function call from 0.9.7 and adding a bit
> > of
> > glue.  I also added the pkcs12 -CSP command line option to the help
> > and man
> > page.  This patch is against openssl-SNAP-20050305.  I am Canadian and
> > did
> > this in Australia.
> >
> 
> Unfortunately I can't just modify the PKCS12_create() function by adding
> an extra argument because that would break existing code.
> 
> I'll have to either find a way of attaching a "CSP name" atribute to a
> private key or use the medium level APIs instead of the high level
> PKCS12_create.
> 
> Steve.
> 
>

__
OpenSSL Project http://www.openssl.org
Development Mailing List   openssl-dev@openssl.org
Automated List Manager   [EMAIL PROTECTED]


Compile last SNAP 20050514

2005-05-14 Thread Philippe BOUGERET

Hello, 

When I try to compile last SNAP, I got some error :

First when I run perl :

D:\Download\openssl-0.9.7-stable-SNAP-20050514>perl Configure -DZLIB
VC-WIN32
Configuring for VC-WIN32
IsWindows=1
CC=cl
CFLAG =-DOPENSSL_SYSNAME_WIN32 -DOPENSSL_THREADS
-DDSO_WIN32 -DOPENSSL_
NO_KRB5 -DZLIB
EX_LIBS   =
BN_ASM=bn_asm.o
DES_ENC   =des_enc.o fcrypt_b.o
BF_ENC=bf_enc.o
CAST_ENC  =c_enc.o
RC4_ENC   =rc4_enc.o
RC5_ENC   =rc5_enc.o
MD5_OBJ_ASM   =
SHA1_OBJ_ASM  =
RMD160_OBJ_ASM=
PROCESSOR =
RANLIB=true
ARFLAGS   =
PERL  =perl
THIRTY_TWO_BIT mode
BN_LLONG mode
RC4_INDEX mode
RC4_CHUNK is undefined

Configured for VC-WIN32.

D:\Download\openssl-0.9.7-stable-SNAP-20050514>call ms\do_ms.bat

D:\Download\openssl-0.9.7-stable-SNAP-20050514>perl util\mkfiles.pl
1>MINFO

D:\Download\openssl-0.9.7-stable-SNAP-20050514>rem perl
util\mk1mf.pl no-sock  V
C-MSDOS >ms\msdos.mak

D:\Download\openssl-0.9.7-stable-SNAP-20050514>rem perl
util\mk1mf.pl  VC-W31-32
 >ms\w31.mak

D:\Download\openssl-0.9.7-stable-SNAP-20050514>perl util\mk1mf.pl
dll  VC-W31-32
  1>ms\w31dll.mak

D:\Download\openssl-0.9.7-stable-SNAP-20050514>perl util\mk1mf.pl
no-asm  VC-WIN
32  1>ms\nt.mak

D:\Download\openssl-0.9.7-stable-SNAP-20050514>perl util\mk1mf.pl
dll no-asm  VC
-WIN32  1>ms\ntdll.mak

D:\Download\openssl-0.9.7-stable-SNAP-20050514>perl util\mk1mf.pl
no-asm  VC-CE
 1>ms\ce.mak
    
    D:\Download\openssl-0.9.7-stable-SNAP-20050514>perl util\mk1mf.pl
dll no-asm  VC
-CE  1>ms\cedll.mak
    
D:\Download\openssl-0.9.7-stable-SNAP-20050514>perl util\mkdef.pl 16
libeay   1>
ms\libeay16.def
WARNING: mkdef.pl doesn't know the following algorithms:
SHA256
    SHA512

D:\Download\openssl-0.9.7-stable-SNAP-20050514>perl util\mkdef.pl 32
libeay   1>
ms\libeay32.def
WARNING: mkdef.pl doesn't know the following algorithms:
SHA256
    SHA512

D:\Download\openssl-0.9.7-stable-SNAP-20050514>perl util\mkdef.pl 16
ssleay   1>
ms\ssleay16.def
WARNING: mkdef.pl doesn't know the following algorithms:
    SHA256
SHA512

D:\Download\openssl-0.9.7-stable-SNAP-20050514>perl util\mkdef.pl 32
ssleay   1>
ms\ssleay32.def
WARNING: mkdef.pl doesn't know the following algorithms:
SHA256
SHA512




Then, when I run "nmake -f ms\nt.mak" or "nmake -f ms\ntdll.mak", I got the
error :

cl /Fotmp32\fips_sha256.obj  -Iinc32 -Itmp32 -DZLIB  /MD /W3 /WX /G5
/Ox
 /O2 /Ob2 /Gs0 /GF /Gy /nologo -DOPENSSL_SYSNAME_WIN32
-DWIN32_LEAN_AND_MEAN -DL
_ENDIAN -DDSO_WIN32 /Fdout32 -DOPENSSL_NO_KRB5  -c
.\fips\sha1\fips_sha256.c
fips_sha256.c

d:\Download\openssl-0.9.7-stable-SNAP-20050514\fips\sha1\fips_md32_common.h(
403)
 : error C2220: avertissement considéré comme une erreur - aucun
fichier objet g
énéré

d:\Download\openssl-0.9.7-stable-SNAP-20050514\fips\sha1\fips_md32_common.h(
403)
 : warning C4013: 'FIPS_selftest_failed' non défini(e) ; extern
retournant int s
upposé
NMAKE : fatal error U1077: 'cl'á: code retour '0x2'
Stop.


--> FIPS_selftest_failed is not defined in fips_sha256.c 



Thanks


__
OpenSSL Project http://www.openssl.org
Development Mailing List   openssl-dev@openssl.org
Automated List Manager   [EMAIL PROTECTED]


Missing openssl_fcast

2005-05-14 Thread Gisle Vanem
Using the snapshot from today, linking fails due to missing
'openssl_fcast':
crypto/asn1/p5_pbe.c: In function 'PKCS5_pbe_set':
crypto/asn1/p5_pbe.c:109: warning: implicit declaration of function 
'openssl_fcast'
crypto/asn1/p5_pbev2.c: In function 'PKCS5_pbe2_set':
crypto/asn1/p5_pbev2.c:167: warning: implicit declaration of function 
'openssl_fcast'
crypto/evp/evp_pkey.c: In function 'EVP_PKEY2PKCS8_broken':
crypto/evp/evp_pkey.c:363: warning: implicit declaration of function 
'openssl_fcast'
crypto/ocsp/ocsp_ext.c: In function 'OCSP_crlID_new':
crypto/ocsp/ocsp_ext.c:447: warning: implicit declaration of function 
'openssl_fcast'
crypto/ocsp/ocsp_srv.c: In function 'OCSP_basic_add1_status':
crypto/ocsp/ocsp_srv.c:151: warning: implicit declaration of function 
'openssl_fcast'
crypto/pem/pem_all.c: In function 'PEM_read_bio_X509_REQ':
crypto/pem/pem_all.c:135: warning: implicit declaration of function 
'openssl_fcast'
crypto/pem/pem_pk8.c: In function 'PEM_read_bio_PKCS8':
crypto/pem/pem_pk8.c:240: warning: implicit declaration of function 
'openssl_fcast'
crypto/pem/pem_x509.c: In function 'PEM_read_bio_X509':
crypto/pem/pem_x509.c:68: warning: implicit declaration of function 
'openssl_fcast'
crypto/pem/pem_xaux.c: In function 'PEM_read_bio_X509_AUX':
crypto/pem/pem_xaux.c:68: warning: implicit declaration of function 
'openssl_fcast'
crypto/x509/x_all.c: In function 'd2i_RSA_PUBKEY_bio':
crypto/x509/x_all.c:262: warning: implicit declaration of function 
'openssl_fcast'
lib/libcrypto.a(p5_pbe.o)(.text+0x1a0):p5_pbe.c: undefined reference to 
`_openssl_fcast'
lib/libcrypto.a(p5_pbev2.o)(.text+0x3d8):p5_pbev2.c: undefined reference to 
`_openssl_fcast'
lib/libcrypto.a(p5_pbev2.o)(.text+0x450):p5_pbev2.c: undefined reference to 
`_openssl_fcast'
lib/libcrypto.a(x_all.o)(.text+0x4b9):x_all.c: undefined reference to 
`_openssl_fcast'
lib/libcrypto.a(x_all.o)(.text+0x509):x_all.c: undefined reference to 
`_openssl_fcast'
lib/libcrypto.a(x_all.o)(.text+0x539):x_all.c: more undefined references to 
`_openssl_fcast' follow
--
I've made sure DEBUG_SAFESTACK is in my CFLAGS.
Looks to me  is missing in some headers.
--gv
__
OpenSSL Project http://www.openssl.org
Development Mailing List   openssl-dev@openssl.org
Automated List Manager   [EMAIL PROTECTED]