[openssl-users] OpenSSL 1.1 on solaris x86 32 bit

2016-11-26 Thread Norm Green

The CHANGES file for 1.1 contains this note regarding this platform:

  *) solaris-x86-cc, i.e. 32-bit configuration with vendor compiler,
 had to be removed. Primary reason is that vendor assembler can't
 assemble our modules with -KPIC flag. As result it, assembly
 support, was not even available as option. But its lack means
 lack of side-channel resistant code, which is incompatible with
 security by todays standards. Fortunately gcc is readily available
 prepackaged option, which we firmly point at...
 [Andy Polyakov]


Can someone please publish some more details about what Solaris and/or 
compiler versions showed problems?


Also were tests failing or were compiles/links failing?

I've tested this configuration with 1.1.0c using an older vendor 
compiler version and everything seems to work just fine using the -KPIC 
flag.  I don't see anywhere in the build log where the assembler is 
being invoked directly.


My compiler is:

cc: Sun C 5.10 SunOS_i386 Patch 142363-05 2010/04/28
usage: cc [ options] files.  Use 'cc -flags' for details

thanks,

Norm Green


--
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users


[openssl-users] stunnel 5.38 released

2016-11-26 Thread MichaƂ Trojnara
Dear Users,

I have released version 5.38 of stunnel.

Version 5.38, 2016.11.26, urgency: MEDIUM
* New features
  - "sni=" can be used to prevent sending the SNI extension.
  - The AI_ADDRCONFIG resolver flag is used when available.
  - Merged Debian 06-lfs.patch (thx Peter Pentchev).
* Bugfixes
  - Fixed a memory allocation bug causing crashes with OpenSSL 1.1.0.
  - Fixed error handling for mixed IPv4/IPv6 destinations.
  - Merged Debian 08-typos.patch (thx Peter Pentchev).

Home page: https://www.stunnel.org/
Download:  https://www.stunnel.org/downloads.html

SHA-256 hashes:
09ada29ba1683ab1fd1f31d7bed8305127a0876537e836a40cb83851da034fd5
stunnel-5.38.tar.gz
8480dd90fbba19324f916267d38835e631b28ffd6b11f9526319c5e8399f4a2f
stunnel-5.38-installer.exe
3d77a3becb6d123eaf3c9abba0ba8b96c1893bdad534710dc7094b5449cfc795
stunnel-5.38-android.zip

Best regards,
Mike



signature.asc
Description: OpenPGP digital signature
-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users


Re: [openssl-users] [openssl-dev] Still showing openssl 1.0.2 snapshot issue

2016-11-26 Thread Salz, Rich

> How long for this to get fixed?
> 
> ../util/shlib_wrap.sh ./heartbeat_test

I posted yesterday, what's your config.  I standard config/make does not do 
this for me.
-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users


[openssl-users] Still showing openssl 1.0.2 snapshot issue

2016-11-26 Thread The Doctor
How long for this to get fixed?

../util/shlib_wrap.sh ./heartbeat_test
test_dtls1_not_bleeding failed: expected return value -1, received 0
** test_dtls1_not_bleeding failed **

test_dtls1_not_bleeding_empty_payload failed: expected return value -1, 
received 0
** test_dtls1_not_bleeding_empty_payload failed **

test_tls1_not_bleeding failed: expected return value -1, received 0
** test_tls1_not_bleeding failed **

test_tls1_not_bleeding_empty_payload failed: expected return value -1, received 0
** test_tls1_not_bleeding_empty_payload failed **

4 tests failed
*** Error code 1

Stop.
make[1]: stopped in /usr/source/openssl-1.0.2-stable-SNAP-20161126/test
*** Error code 1

Stop.
make: stopped in /usr/source/openssl-1.0.2-stable-SNAP-20161126

-- 
Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@nl2k.ab.ca
God,Queen and country!Never Satan President Republic!Beware AntiChrist rising! 
http://www.fullyfollow.me/rootnl2k  Look at Psalms 14 and 53 on Atheism
Merry Christmas 2016 and Happy New Year 2017
-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users