Blutige Selbstjustiz
Polizeiexperten warnen: Ethnisch abgeschottete Mafia-Clans sind kaum noch zu durchdringen. Die Gerichte tragen Mitschuld. Weiter auf: http://www.libasoli.de/2004/ethnoclans%20spiegel50_04.html __ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager [EMAIL PROTECTED]
0.9.8 API/ABI compatibility with 0.9.7 ?
I was wondering if openssl-0.9.8 is going to be API/ABI compatible with the current stable branch of openssl-0.9.7 I think keeping API/ABI compatible is a good idea and makes programmer and users life easier. Anyway, if you are not going to keep API/ABI compatibility in openssl-0.9.8 with 0.9.7 I'd like to hear the reasoning behind that. __ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager [EMAIL PROTECTED]
Re: [openssl.org #1020] [PATCH] restore pkcs12 -CSP in 0.9.8
Thanks very much for replying back Steve, I'd much appreciate whatever you can do here because we need the 0.9.8 features but also need to be able to set the CSP name in order for certificates to be imported correctly into Windows servers. Thanks, Evan On 5/13/05, Stephen Henson via RT <[EMAIL PROTECTED]> wrote: > > [EMAIL PROTECTED] - Sun Mar 6 19:39:25 2005]: > > > Hi, > > > > Somewhen between 0.9.7 and 0.9.8 (I first noticed it around 6 months > > ago), > > PKCS12 creation was refactored, and the new code left out the pkcs12 > > -CSP > > implementation (the option is still accepted, but does nothing > > useful). I'm > > not sure if this was intentional or not, but I didn't see that any > > mention > > of removing the -CSP function in the ChangeLog. > > > > No it wasn't intentional, thanks for the report. > > > I wrote a patch to add back in CSP support to 0.9.8 (please see > > attached) by > > cut-and-pasting the missing function call from 0.9.7 and adding a bit > > of > > glue. I also added the pkcs12 -CSP command line option to the help > > and man > > page. This patch is against openssl-SNAP-20050305. I am Canadian and > > did > > this in Australia. > > > > Unfortunately I can't just modify the PKCS12_create() function by adding > an extra argument because that would break existing code. > > I'll have to either find a way of attaching a "CSP name" atribute to a > private key or use the medium level APIs instead of the high level > PKCS12_create. > > Steve. > > __ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager [EMAIL PROTECTED]
Compile last SNAP 20050514
Hello, When I try to compile last SNAP, I got some error : First when I run perl : D:\Download\openssl-0.9.7-stable-SNAP-20050514>perl Configure -DZLIB VC-WIN32 Configuring for VC-WIN32 IsWindows=1 CC=cl CFLAG =-DOPENSSL_SYSNAME_WIN32 -DOPENSSL_THREADS -DDSO_WIN32 -DOPENSSL_ NO_KRB5 -DZLIB EX_LIBS = BN_ASM=bn_asm.o DES_ENC =des_enc.o fcrypt_b.o BF_ENC=bf_enc.o CAST_ENC =c_enc.o RC4_ENC =rc4_enc.o RC5_ENC =rc5_enc.o MD5_OBJ_ASM = SHA1_OBJ_ASM = RMD160_OBJ_ASM= PROCESSOR = RANLIB=true ARFLAGS = PERL =perl THIRTY_TWO_BIT mode BN_LLONG mode RC4_INDEX mode RC4_CHUNK is undefined Configured for VC-WIN32. D:\Download\openssl-0.9.7-stable-SNAP-20050514>call ms\do_ms.bat D:\Download\openssl-0.9.7-stable-SNAP-20050514>perl util\mkfiles.pl 1>MINFO D:\Download\openssl-0.9.7-stable-SNAP-20050514>rem perl util\mk1mf.pl no-sock V C-MSDOS >ms\msdos.mak D:\Download\openssl-0.9.7-stable-SNAP-20050514>rem perl util\mk1mf.pl VC-W31-32 >ms\w31.mak D:\Download\openssl-0.9.7-stable-SNAP-20050514>perl util\mk1mf.pl dll VC-W31-32 1>ms\w31dll.mak D:\Download\openssl-0.9.7-stable-SNAP-20050514>perl util\mk1mf.pl no-asm VC-WIN 32 1>ms\nt.mak D:\Download\openssl-0.9.7-stable-SNAP-20050514>perl util\mk1mf.pl dll no-asm VC -WIN32 1>ms\ntdll.mak D:\Download\openssl-0.9.7-stable-SNAP-20050514>perl util\mk1mf.pl no-asm VC-CE 1>ms\ce.mak D:\Download\openssl-0.9.7-stable-SNAP-20050514>perl util\mk1mf.pl dll no-asm VC -CE 1>ms\cedll.mak D:\Download\openssl-0.9.7-stable-SNAP-20050514>perl util\mkdef.pl 16 libeay 1> ms\libeay16.def WARNING: mkdef.pl doesn't know the following algorithms: SHA256 SHA512 D:\Download\openssl-0.9.7-stable-SNAP-20050514>perl util\mkdef.pl 32 libeay 1> ms\libeay32.def WARNING: mkdef.pl doesn't know the following algorithms: SHA256 SHA512 D:\Download\openssl-0.9.7-stable-SNAP-20050514>perl util\mkdef.pl 16 ssleay 1> ms\ssleay16.def WARNING: mkdef.pl doesn't know the following algorithms: SHA256 SHA512 D:\Download\openssl-0.9.7-stable-SNAP-20050514>perl util\mkdef.pl 32 ssleay 1> ms\ssleay32.def WARNING: mkdef.pl doesn't know the following algorithms: SHA256 SHA512 Then, when I run "nmake -f ms\nt.mak" or "nmake -f ms\ntdll.mak", I got the error : cl /Fotmp32\fips_sha256.obj -Iinc32 -Itmp32 -DZLIB /MD /W3 /WX /G5 /Ox /O2 /Ob2 /Gs0 /GF /Gy /nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_MEAN -DL _ENDIAN -DDSO_WIN32 /Fdout32 -DOPENSSL_NO_KRB5 -c .\fips\sha1\fips_sha256.c fips_sha256.c d:\Download\openssl-0.9.7-stable-SNAP-20050514\fips\sha1\fips_md32_common.h( 403) : error C2220: avertissement considéré comme une erreur - aucun fichier objet g énéré d:\Download\openssl-0.9.7-stable-SNAP-20050514\fips\sha1\fips_md32_common.h( 403) : warning C4013: 'FIPS_selftest_failed' non défini(e) ; extern retournant int s upposé NMAKE : fatal error U1077: 'cl'á: code retour '0x2' Stop. --> FIPS_selftest_failed is not defined in fips_sha256.c Thanks __ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager [EMAIL PROTECTED]
Missing openssl_fcast
Using the snapshot from today, linking fails due to missing 'openssl_fcast': crypto/asn1/p5_pbe.c: In function 'PKCS5_pbe_set': crypto/asn1/p5_pbe.c:109: warning: implicit declaration of function 'openssl_fcast' crypto/asn1/p5_pbev2.c: In function 'PKCS5_pbe2_set': crypto/asn1/p5_pbev2.c:167: warning: implicit declaration of function 'openssl_fcast' crypto/evp/evp_pkey.c: In function 'EVP_PKEY2PKCS8_broken': crypto/evp/evp_pkey.c:363: warning: implicit declaration of function 'openssl_fcast' crypto/ocsp/ocsp_ext.c: In function 'OCSP_crlID_new': crypto/ocsp/ocsp_ext.c:447: warning: implicit declaration of function 'openssl_fcast' crypto/ocsp/ocsp_srv.c: In function 'OCSP_basic_add1_status': crypto/ocsp/ocsp_srv.c:151: warning: implicit declaration of function 'openssl_fcast' crypto/pem/pem_all.c: In function 'PEM_read_bio_X509_REQ': crypto/pem/pem_all.c:135: warning: implicit declaration of function 'openssl_fcast' crypto/pem/pem_pk8.c: In function 'PEM_read_bio_PKCS8': crypto/pem/pem_pk8.c:240: warning: implicit declaration of function 'openssl_fcast' crypto/pem/pem_x509.c: In function 'PEM_read_bio_X509': crypto/pem/pem_x509.c:68: warning: implicit declaration of function 'openssl_fcast' crypto/pem/pem_xaux.c: In function 'PEM_read_bio_X509_AUX': crypto/pem/pem_xaux.c:68: warning: implicit declaration of function 'openssl_fcast' crypto/x509/x_all.c: In function 'd2i_RSA_PUBKEY_bio': crypto/x509/x_all.c:262: warning: implicit declaration of function 'openssl_fcast' lib/libcrypto.a(p5_pbe.o)(.text+0x1a0):p5_pbe.c: undefined reference to `_openssl_fcast' lib/libcrypto.a(p5_pbev2.o)(.text+0x3d8):p5_pbev2.c: undefined reference to `_openssl_fcast' lib/libcrypto.a(p5_pbev2.o)(.text+0x450):p5_pbev2.c: undefined reference to `_openssl_fcast' lib/libcrypto.a(x_all.o)(.text+0x4b9):x_all.c: undefined reference to `_openssl_fcast' lib/libcrypto.a(x_all.o)(.text+0x509):x_all.c: undefined reference to `_openssl_fcast' lib/libcrypto.a(x_all.o)(.text+0x539):x_all.c: more undefined references to `_openssl_fcast' follow -- I've made sure DEBUG_SAFESTACK is in my CFLAGS. Looks to me is missing in some headers. --gv __ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager [EMAIL PROTECTED]