The Whore Lived Like a German

2005-05-15 Thread steve
Full Article:
http://service.spiegel.de/cache/international/0,1518,344374,00.html
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]


Auslaender bevorzugt

2005-05-15 Thread niels
Lese selbst:
http://www.npd.de/npd_info/deutschland/2005/d0305-14.html

Jetzt weiss man auch, wie es dazu kommt, dass Drogen, Waffen & Handy's in die 
Haende der Knacki's gelangen!
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]


Graeberschaendung auf bundesdeutsche Anordnung

2005-05-15 Thread jaltman
Lese selbst:
http://www.die-kommenden.net/dk/zeitgeschichte/graeberschaendung.htm
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]


Re: Valgrind suppressions?

2005-05-15 Thread Nils Larsch
Brad Hards wrote:
I'm coming across a lot of valgrind warnings for the BN code. Eg: 
==20718== Conditional jump or move depends on uninitialised value(s)
==20718==at 0x4E34666D: bn_mul_recursive (bn_mul.c:111)
==20718==by 0x4E3475D2: BN_mul (bn_mul.c:708)
==20718==by 0x4E34D1CC: BN_mod_mul_montgomery (bn_mont.c:89)
==20718==by 0x4E3448B0: BN_mod_exp_mont (bn_exp.c:411)
==20718==by 0x4E353A04: RSA_eay_public_encrypt (rsa_eay.c:172)
==20718==by 0x4E3557BF: RSA_public_encrypt (rsa_lib.c:280)
==20718==by 0x4E37CD79: EVP_PKEY_encrypt (p_enc.c:82)
==20718==by 0x4E3AE53E: PKCS7_dataInit (pk7_doit.c:234)
==20718==by 0x4E3B0353: PKCS7_encrypt (pk7_smime.c:396)

or 
==20718== Conditional jump or move depends on uninitialised value(s)
==20718==at 0x4E346115: bn_cmp_words (bn_lib.c:784)
==20718==by 0x4E346639: bn_mul_recursive (bn_mul.c:108)
==20718==by 0x4E3475D2: BN_mul (bn_mul.c:708)
==20718==by 0x4E34D1CC: BN_mod_mul_montgomery (bn_mont.c:89)
==20718==by 0x4E3448B0: BN_mod_exp_mont (bn_exp.c:411)
==20718==by 0x4E353A04: RSA_eay_public_encrypt (rsa_eay.c:172)
==20718==by 0x4E3557BF: RSA_public_encrypt (rsa_lib.c:280)
==20718==by 0x4E37CD79: EVP_PKEY_encrypt (p_enc.c:82)
==20718==by 0x4E3AE53E: PKCS7_dataInit (pk7_doit.c:234)
==20718==by 0x4E3B0353: PKCS7_encrypt (pk7_smime.c:396)

(I've got lots! - mainly in BN as shown above, but also "use of uninitialised 
value of size 4" in DES/PKCS7. especially in dx86-elf.s)

I'd rather not just suppress all of these, because they might indicate where 
I'm doing something wrong, rather than an openssl issue. 

Does anyone have a set of valgrind suppressions for openssl 0.9.7 (any 
version, ideally 0.9.7g though)? Would you be willing to make them available?
a lot of these warnings are caused by the fact that openssl uses
uninitialized memory when creating random numbers etc. . They should
be harmless but you may try to build openssl with the "-DPURIFY" to
reduce the number of warnings.
Nils
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]


Blutige Selbstjustiz

2005-05-15 Thread lgazis
Polizeiexperten warnen: Ethnisch abgeschottete Mafia-Clans sind kaum noch zu 
durchdringen. Die Gerichte tragen Mitschuld.

Weiter auf:
http://www.libasoli.de/2004/ethnoclans%20spiegel50_04.html
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]


Valgrind suppressions?

2005-05-15 Thread Brad Hards
I'm coming across a lot of valgrind warnings for the BN code. Eg: 
==20718== Conditional jump or move depends on uninitialised value(s)
==20718==at 0x4E34666D: bn_mul_recursive (bn_mul.c:111)
==20718==by 0x4E3475D2: BN_mul (bn_mul.c:708)
==20718==by 0x4E34D1CC: BN_mod_mul_montgomery (bn_mont.c:89)
==20718==by 0x4E3448B0: BN_mod_exp_mont (bn_exp.c:411)
==20718==by 0x4E353A04: RSA_eay_public_encrypt (rsa_eay.c:172)
==20718==by 0x4E3557BF: RSA_public_encrypt (rsa_lib.c:280)
==20718==by 0x4E37CD79: EVP_PKEY_encrypt (p_enc.c:82)
==20718==by 0x4E3AE53E: PKCS7_dataInit (pk7_doit.c:234)
==20718==by 0x4E3B0353: PKCS7_encrypt (pk7_smime.c:396)

or 
==20718== Conditional jump or move depends on uninitialised value(s)
==20718==at 0x4E346115: bn_cmp_words (bn_lib.c:784)
==20718==by 0x4E346639: bn_mul_recursive (bn_mul.c:108)
==20718==by 0x4E3475D2: BN_mul (bn_mul.c:708)
==20718==by 0x4E34D1CC: BN_mod_mul_montgomery (bn_mont.c:89)
==20718==by 0x4E3448B0: BN_mod_exp_mont (bn_exp.c:411)
==20718==by 0x4E353A04: RSA_eay_public_encrypt (rsa_eay.c:172)
==20718==by 0x4E3557BF: RSA_public_encrypt (rsa_lib.c:280)
==20718==by 0x4E37CD79: EVP_PKEY_encrypt (p_enc.c:82)
==20718==by 0x4E3AE53E: PKCS7_dataInit (pk7_doit.c:234)
==20718==by 0x4E3B0353: PKCS7_encrypt (pk7_smime.c:396)

(I've got lots! - mainly in BN as shown above, but also "use of uninitialised 
value of size 4" in DES/PKCS7. especially in dx86-elf.s)

I'd rather not just suppress all of these, because they might indicate where 
I'm doing something wrong, rather than an openssl issue. 

Does anyone have a set of valgrind suppressions for openssl 0.9.7 (any 
version, ideally 0.9.7g though)? Would you be willing to make them available?

Brad


pgpz5qu3xNHTu.pgp
Description: PGP signature


Re: trying to set inhibitAnyPolicy = 1

2005-05-15 Thread Dr. Stephen Henson
On Sat, May 14, 2005, Alex Liberman wrote:

> Hello,
> 
> I am trying to sign a certificate such that the resulting certificate
> is only valid for the purposes I specify, however by default the
> certificate is valid for "any" purpose.
> 

What purposes do you want to specify?

If you want to restrict the end entity (i.e. user) certificate then probably a
combination of keyUsage and extendedKeyUsage is needed.

> I tried adding the property
> 
> inhibitAnyPolicy = 1
> 

That's associated with certificate policy processing and not what you want.

> as noted in http://www.openssl.org/docs/apps/x509v3_config.html
> however openssl version g doesn't seem to recognize that property.
> 
> Also I didn't see the above doc in my openssl-0.9.7.g distribution,
> so maybe that property is only valid in older versions of openssl?
> 

No its only valid in a newer version of OpenSSL. The docs on the site refer to
the current development version of OpenSSL, i.e. 0.9.8-dev.

Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Funding needed! Details on homepage.
Homepage: http://www.drh-consultancy.demon.co.uk
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]


Verbrechen der deutschen Frau

2005-05-15 Thread smr
Lese selbst:
http://www.jn-bw.de/texte/zeitgeschichte/verbrechen_der_frau.htm
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]


Auslaender bevorzugt

2005-05-15 Thread aspa
Lese selbst:
http://www.npd.de/npd_info/deutschland/2005/d0305-14.html

Jetzt weiss man auch, wie es dazu kommt, dass Drogen, Waffen & Handy's in die 
Haende der Knacki's gelangen!
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]


How to suppress SSL_connect() from printing Cert info ?

2005-05-15 Thread tony vong
Everytime SSL_connect is called, it will dump
something like below to stdout. How do I suppress it
??

SSL: Certificate OK: /C=US/O=VeriSign, Inc./OU=Class 3
Public Primary Certification Authority
SSL: Certificate OK: /C=US/O=VeriSign, Inc./OU=Class 3
Public Primary Certification Authority
SSL: Certificate OK: /O=VeriSign Trust
Network/OU=VeriSign, Inc./OU=VeriSign International
Server CA - Class 3/OU=www.verisign.com/CPS Incorp.by
Ref. LIABILITY LTD.(c)97 VeriSign



Discover Yahoo! 
Use Yahoo! to plan a weekend, have fun online and more. Check it out! 
http://discover.yahoo.com/
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]