Clean up no-mdc2 default no-patent cruft?

2009-07-30 Thread William A. Rowe, Jr.
This patent expired 2 years ago, it seems 1.0.0 is a good time to
get this fixed... at least if it remains default-disabled, then the
justification should be noted (no longer patented but perhaps some
deprecated commentary?)

I think the changes are limited to the lines below...

README
--
  The MDC2 algorithm is patented by IBM.

FAQ
---
  You can configure OpenSSL so as not to use IDEA, MDC2 and RC5 by using
  ./config no-idea no-mdc2 no-rc5
[...]
  FYI: Patent numbers and expiry dates of US patents:
  MDC-2: 4,908,861 13/03/2007

util/cygwin.sh
--
  CONFIG_OPTIONS=--prefix=/usr shared no-idea no-rc5 no-mdc2

Configure
-
  my %disabled = ( # what   = comment [or special keyword
experimental]
[...]
 mdc2   = default,
[...]
  # This is what $depflags will look like with the above defaults
  # (we need this to see if we should advise the user to run make depend):
  my $default_depflags =  -DOPENSSL_NO_GMP -DOPENSSL_NO_JPAKE
-DOPENSSL_NO_MD2 -DOPENSSL_NO_MDC2 -DOPENSSL_NO_RC5 -DOPENSSL_NO_RFC3779
-DOPENSSL_NO_STORE;


Miscellany
--
from util/mk1mf.pl
no-patents =
[\$no_rc2, \$no_rc4, \$no_rc5, \$no_idea, \$no_rsa],

Why RSA (expired in 2000)?  How are RC2, RC4 in this list.  Not patents.
Trademarks?

Also it seems odd this is recognized by mk1mf.pl - wrong place.  Should be
set up in Configure.  No?

Somewhere, perhaps add;

MDC2 was covered by a US patent issued to IBM which expired in March 2007.
__
OpenSSL Project http://www.openssl.org
Development Mailing List   openssl-dev@openssl.org
Automated List Manager   majord...@openssl.org


[PATCH] Add z/OS compilation options with xlc

2009-07-30 Thread Amul Shah
Hello,
I did a quick search of the openssl.org pages for patch submission
guidelines.  I didn't find one, so please excuse any oddities from my end.

This patch adds z/OS compilations options to the Configure script for
openssl 0.9.8k.

My setup:

I compiled openssl with xlc (V1.10)
and ran the openssl self checks on z/OS V1R10.

I compiled and ran the openssl self checks on z/OS R10 with the ICSF
(encryption hardware and /dev/random enabled by IBM support staff). 
Most of the self checks passed, there was a glaring failure for DES.

The new build options are as follows:
- OS390-Unix32-ascii
Compile openssl as a 31 bit ASCII enabled with shared libraries
- OS390-Unix64-ascii
Compile openssl as a 64 bit ASCII enabled with shared libraries
- OS390-Unix32
Compile openssl as a 31 bit app with shared libraries (uses the platform
native encoding EBCDIC)
- OS390-Unix64
Compile openssl as a 64 bit app with shared libraries (uses the platform
native encoding EBCDIC)




--- openssl-0.9.8k.orig/ConfigureMon Feb 16 03:44:22 2009
+++ openssl-0.9.8k/ConfigureWed Apr 29 17:02:13 2009
@@ -465,6 +465,15 @@ my %table=(
 # You need to compile using the c89.sh wrapper in the tools directory,
because the
 # IBM compiler does not like the -L switch after any object modules.
 #
+# ASCII libraries for both 31bit and 64bit modes
+OS390-Unix32-ascii,xlc: -qascii -D_ENHANCED_ASCII_EXT=0x
-DB_ENDIAN -DNO_SYS_PARAM_H -DNO_ASM -DFULLBLOCKWRITES
-D_XOPEN_SOURCE_EXTENDED=1 -D_ALL_SOURCE_NO_THREADS -D_VARARG_EXT_
-D_UNIX03_SOURCE -D_IEEEV1_COMPATIBILITY  -qchars=signed
-qlanglvl=extended -W l,DLL -W c,EXPORTALL,RENT,NOANSIALIAS
::(unknown):MVS:-lm:THIRTY_TWO_BIT DES_PTR MD2_CHAR RC4_INDEX RC4_CHAR
BF_PTR:${no_asm}:dlfcn:svr5-shared::-W
l,dll:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)::,
+OS390-Unix64-ascii,xlc: -qascii -D_ENHANCED_ASCII_EXT=0x
-DB_ENDIAN -DNO_SYS_PARAM_H -DNO_ASM -DFULLBLOCKWRITES
-D_XOPEN_SOURCE_EXTENDED=1 -D_ALL_SOURCE_NO_THREADS -D_VARARG_EXT_
-D_UNIX03_SOURCE -D_IEEEV1_COMPATIBILITY  -qchars=signed
-qlanglvl=extended -W l,DLL,LP64,XPLINK  -W
c,LP64,XPLINK,EXPORTALL,RENT,NOANSIALIAS
::(unknown):MVS:-lm:SIXTY_FOUR_BIT_LONG DES_PTR MD2 _CHAR RC4_INDEX
RC4_CHAR BF_PTR:${no_asm}:dlfcn:svr5-shared::-q64 -W
l,dll:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)::,
+
+# EBCDIC (platform native) libraries for both 31bit and 64bit modes
+OS390-Unix32,xlc: -DB_ENDIAN -DNO_SYS_PARAM_H -DNO_ASM
-DFULLBLOCKWRITES -D_XOPEN_SOURCE_EXTENDED=1 -D_ALL_SOURCE_NO_THREADS
-D_VARARG_EXT_ -D_UNIX03_SOURCE -D_IEEEV1_COMPATIBILITY  -qchars=signed
-qlanglvl=extended -W l,DLL -W c,EXPORTALL,RENT,NOANSIALIAS
::(unknown):MVS:-lm:THIRTY_TWO_BIT DES_PTR MD2_CHAR RC4_INDEX RC4_CHAR
BF_PTR:${no_asm}:dlfcn:svr5-shared::-W
l,dll:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)::,
+OS390-Unix64,xlc: -DB_ENDIAN -DNO_SYS_PARAM_H -DNO_ASM
-DFULLBLOCKWRITES -D_XOPEN_SOURCE_EXTENDED=1 -D_ALL_SOURCE_NO_THREADS
-D_VARARG_EXT_ -D_UNIX03_SOURCE -D_IEEEV1_COMPATIBILITY  -qchars=signed
-qlanglvl=extended -W l,DLL,LP64,XPLINK  -W
c,LP64,XPLINK,EXPORTALL,RENT,NOANSIALIAS
::(unknown):MVS:-lm:SIXTY_FOUR_BIT_LONG DES_PTR MD2 _CHAR RC4_INDEX
RC4_CHAR BF_PTR:${no_asm}:dlfcn:svr5-shared::-q64 -W
l,dll:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)::,
+
+# The original compilation option for z/OS
 OS390-Unix,c89.sh:-O -DB_ENDIAN -DCHARSET_EBCDIC -DNO_SYS_PARAM_H 
-D_ALL_SOURCE::(unknown):::THIRTY_TWO_BIT DES_PTR DES_UNROLL MD2_CHAR
RC4_INDEX RC4_CHAR BF_PTR:::,
 
 # Win64 targets, WIN64I denotes IA-64 and WIN64A - AMD64






_

The information contained in this message is proprietary and/or confidential. 
If you are not the 
intended recipient, please: (i) delete the message and all copies; (ii) do not 
disclose, 
distribute or use the message in any manner; and (iii) notify the sender 
immediately. In addition, 
please be aware that any message addressed to our domain is subject to 
archiving and review by 
persons other than the intended recipient. Thank you.
_
__
OpenSSL Project http://www.openssl.org
Development Mailing List   openssl-dev@openssl.org
Automated List Manager   majord...@openssl.org


MD[2,4,5]_[Final,Init,Update]

2009-07-30 Thread Mizas, Timothy
Hi,
I've been trying to find the source for the MD[2,4,5]_[Final, Init, Update] 
functions. The Linux kernel has md[4,5]_[final, init, update], but not only is 
it missing 2, it is in lower case and seems to take different arguments than 
openssl passes to these functions. Where can I find the source for these 
functions?

Thanks,
Tim


Re: MD[2,4,5]_[Final,Init,Update]

2009-07-30 Thread lists
Hi Tim,

On Thu, Jul 30, 2009 at 10:46:07AM -0400, Mizas, Timothy wrote:

 I've been trying to find the source for the MD[2,4,5]_[Final, Init,
 Update] functions. The Linux kernel has md[4,5]_[final, init, update],
 but not only is it missing 2, it is in lower case and seems to take
 different arguments than openssl passes to these functions. Where can
 I find the source for these functions?

there was a similar thread on openssl-users yesterday, starting with
24713919.p...@talk.nabble.com

Regards,

   Martin
__
OpenSSL Project http://www.openssl.org
Development Mailing List   openssl-dev@openssl.org
Automated List Manager   majord...@openssl.org