Re: [oss-security] feedback requested regarding deprecation of TLS 1.0/1.1

2024-08-07 Thread Neil Horman
ocols would be responsible for building and linking > their own OpenSSL. > > 3) I don't have a good answer for you. I think systems programming is > fairly impoverished in terms of ways to emit _runtime_ warnings. I'd > suggest focusing on compile-time warnings. > > Alex

Re: [oss-security] feedback requested regarding deprecation of TLS 1.0/1.1

2024-08-06 Thread Neil Horman
build time (or some other build time notification) 2) augment openssl version (or other openssl applet) to indicate that TLS1.1/1.0 support is built in but is deprecated On Tue, Aug 6, 2024 at 11:17 AM Marco Moock wrote: > Am Tue, 6 Aug 2024 05:02:14 -0400 > schrieb Neil Horman : &

[oss-security] feedback requested regarding deprecation of TLS 1.0/1.1

2024-08-06 Thread Neil Horman
Neil Horman 4:19 AM (42 minutes ago) to openssl-security OpenSSL is currently considering the deprecation of the TLS 1.0/1.1 protocols. Currently TLS1.1 and TLS 1.0 are disabled at run time, and requires enablement by reducing the ssl security level value. The current proposal under

[openssl/openssl] 9676c4: Add ssl validation skip option to http3 demo

2024-07-31 Thread Neil Horman
Branch: refs/heads/http3-demo-options Home: https://github.com/openssl/openssl Commit: 9676c482647d547abcb6a67e583f36b432374208 https://github.com/openssl/openssl/commit/9676c482647d547abcb6a67e583f36b432374208 Author: Neil Horman Date: 2024-07-31 (Wed, 31 Jul 2024

[openssl/openssl] 3190f5: Fix CRYPTO_atomic_store

2024-07-31 Thread Neil Horman
Branch: refs/heads/master Home: https://github.com/openssl/openssl Commit: 3190f5c06bd23ae4ddc659409e77070a6caa1539 https://github.com/openssl/openssl/commit/3190f5c06bd23ae4ddc659409e77070a6caa1539 Author: Neil Horman Date: 2024-07-31 (Wed, 31 Jul 2024) Changed paths

[openssl/installer] 372a73: Add env vars during install

2024-07-30 Thread Neil Horman
Branch: refs/heads/main Home: https://github.com/openssl/installer Commit: 372a7313f8e74190eb74e16a20e33f2a21fefc5b https://github.com/openssl/installer/commit/372a7313f8e74190eb74e16a20e33f2a21fefc5b Author: Neil Horman Date: 2024-05-21 (Tue, 21 May 2024) Changed paths

[openssl/openssl] 4811ef: fix Coverity 1604662

2024-07-27 Thread Neil Horman
Branch: refs/heads/master Home: https://github.com/openssl/openssl Commit: 4811efe12fd1af9554718ae15996470a5c2ecd70 https://github.com/openssl/openssl/commit/4811efe12fd1af9554718ae15996470a5c2ecd70 Author: Neil Horman Date: 2024-07-27 (Sat, 27 Jul 2024) Changed paths

[openssl/openssl] 32185d: Fix second error from Coverity-161057

2024-07-26 Thread Neil Horman
Branch: refs/heads/master Home: https://github.com/openssl/openssl Commit: 32185d513cf8732ee0a85875ac61ee4389a86bbb https://github.com/openssl/openssl/commit/32185d513cf8732ee0a85875ac61ee4389a86bbb Author: Neil Horman Date: 2024-07-26 (Fri, 26 Jul 2024) Changed paths

[openssl/openssl] 31cd9c: Fix coverity-993406

2024-07-26 Thread Neil Horman
Branch: refs/heads/master Home: https://github.com/openssl/openssl Commit: 31cd9cd830f847c0effc7c15b814f890228c3739 https://github.com/openssl/openssl/commit/31cd9cd830f847c0effc7c15b814f890228c3739 Author: Neil Horman Date: 2024-07-26 (Fri, 26 Jul 2024) Changed paths

[openssl/openssl] 86fd4c: Fix Coverity-1604641

2024-07-25 Thread Neil Horman
Branch: refs/heads/master Home: https://github.com/openssl/openssl Commit: 86fd4c1df91e58d316c863b5160d18c0f80dc6ac https://github.com/openssl/openssl/commit/86fd4c1df91e58d316c863b5160d18c0f80dc6ac Author: Neil Horman Date: 2024-07-25 (Thu, 25 Jul 2024) Changed paths

Re: compile openssl for Arm A9 & VxWorks

2024-07-24 Thread Neil Horman
;ossl_uintmax_t'* > > *In file included from include/internal/e_os.h:17,* > > * from apps\include/apps.h:13,* > > * from apps\lib\app_libctx.c:10:* > > *include/openssl/crypto.h:25:21: error: stdlib.h: No such file or > directory* >

[openssl/openssl] ec1d8e: Fix strtoul test on alpine/musl

2024-07-24 Thread Neil Horman
Branch: refs/heads/master Home: https://github.com/openssl/openssl Commit: ec1d8ead2855f6cd529f9a1ace0a667f34eefc58 https://github.com/openssl/openssl/commit/ec1d8ead2855f6cd529f9a1ace0a667f34eefc58 Author: Neil Horman Date: 2024-07-24 (Wed, 24 Jul 2024) Changed paths

Re: compile openssl for Arm A9 & VxWorks

2024-07-24 Thread Neil Horman
ponents\ip_net2-6.9\osconfig\vxworks\h > -I$(WIND_HOME)\components\cafe-0.1\osconfig\vxworks\h -I$(TGT_DIR)\src\hwif > -I$(TGT_DIR)\src\hwif\h -I $(TGT_DIR)\3rdparty\pbcl\h -I. > -I$(TGT_DIR)\h\wrn\coreip -I$(TGT_DIR)\src\config > -I$(TGT_DIR)\config\comps\src -I$(TGT_DIR)\config\comps

[openssl/openssl] 4f619c: Ensure cmd from fuzz buffer is always valid

2024-07-23 Thread Neil Horman
Branch: refs/heads/master Home: https://github.com/openssl/openssl Commit: 4f619ca622b6c36626ddc9a04b0b8589d7802dc0 https://github.com/openssl/openssl/commit/4f619ca622b6c36626ddc9a04b0b8589d7802dc0 Author: Neil Horman Date: 2024-07-23 (Tue, 23 Jul 2024) Changed paths

Re: Building x32 libraries on x64 windows machine

2024-07-19 Thread Neil Horman
This error: fatal error LNK1112: module machine type 'x64' conflicts with target machine type 'x86' says that you're set up for using x64 native tools, despite indicating you have opened the x86 native tool command Try running vcvarsall.bat x32 Which should force your environment to build in 32

[openssl/openssl] 500662: Fix coverity-1604661

2024-07-18 Thread Neil Horman
Branch: refs/heads/master Home: https://github.com/openssl/openssl Commit: 50066236eb3b31c93aaa935ca38f5cc1ec056696 https://github.com/openssl/openssl/commit/50066236eb3b31c93aaa935ca38f5cc1ec056696 Author: Neil Horman Date: 2024-07-18 (Thu, 18 Jul 2024) Changed paths

[openssl/openssl] 04f772: Add an OPENSSL_strtoul wrapper

2024-07-18 Thread Neil Horman
Branch: refs/heads/master Home: https://github.com/openssl/openssl Commit: 04f7729c409afad235737ee6b4edcb78efdc1bfd https://github.com/openssl/openssl/commit/04f7729c409afad235737ee6b4edcb78efdc1bfd Author: Neil Horman Date: 2024-07-18 (Thu, 18 Jul 2024) Changed paths

Re: compile openssl for Arm A9 & VxWorks

2024-07-17 Thread Neil Horman
There are already several targets defined for vxworks. First step I would think would be cloning one of those targets in Configurations/10-main.conf for your purposes and adjusting the settings accordingly: "vxworks-ppc60x" => {<= Change this to "vxworks-arm9' or some such inherit

[openssl/openssl] 7209a6: Fix coverity-1604666

2024-07-17 Thread Neil Horman
Branch: refs/heads/openssl-3.2 Home: https://github.com/openssl/openssl Commit: 7209a6b5f4bc758349f45d35f68d6dc41b11a8d3 https://github.com/openssl/openssl/commit/7209a6b5f4bc758349f45d35f68d6dc41b11a8d3 Author: Neil Horman Date: 2024-07-17 (Wed, 17 Jul 2024) Changed paths

[openssl/openssl] b9ba50: Fix coverity-1604666

2024-07-17 Thread Neil Horman
Branch: refs/heads/openssl-3.0 Home: https://github.com/openssl/openssl Commit: b9ba50cdcafe5803ca56ebf07291703654aafb9b https://github.com/openssl/openssl/commit/b9ba50cdcafe5803ca56ebf07291703654aafb9b Author: Neil Horman Date: 2024-07-17 (Wed, 17 Jul 2024) Changed paths

[openssl/openssl] 22e08c: Fix coverity-1604666

2024-07-17 Thread Neil Horman
Branch: refs/heads/master Home: https://github.com/openssl/openssl Commit: 22e08c7cdc596d4f16749811d1022fb8b07a8e41 https://github.com/openssl/openssl/commit/22e08c7cdc596d4f16749811d1022fb8b07a8e41 Author: Neil Horman Date: 2024-07-17 (Wed, 17 Jul 2024) Changed paths

[openssl/openssl] 79ab70: Fix coverity-1604666

2024-07-17 Thread Neil Horman
Branch: refs/heads/openssl-3.1 Home: https://github.com/openssl/openssl Commit: 79ab705b70282dff51ecc5d672e6bb6561a75c3b https://github.com/openssl/openssl/commit/79ab705b70282dff51ecc5d672e6bb6561a75c3b Author: Neil Horman Date: 2024-07-17 (Wed, 17 Jul 2024) Changed paths

[openssl/openssl] 1d37b0: Fix coverity-1604666

2024-07-17 Thread Neil Horman
Branch: refs/heads/openssl-3.3 Home: https://github.com/openssl/openssl Commit: 1d37b00b28962095fba1baa1590d05539dcdc6db https://github.com/openssl/openssl/commit/1d37b00b28962095fba1baa1590d05539dcdc6db Author: Neil Horman Date: 2024-07-17 (Wed, 17 Jul 2024) Changed paths

[openssl/openssl] a75354: Fix coverity-1604665

2024-07-17 Thread Neil Horman
Branch: refs/heads/master Home: https://github.com/openssl/openssl Commit: a753547eefc9739f341824a0cb0642afe7a06fcc https://github.com/openssl/openssl/commit/a753547eefc9739f341824a0cb0642afe7a06fcc Author: Neil Horman Date: 2024-07-17 (Wed, 17 Jul 2024) Changed paths

[openssl/openssl] 03d0fa: Fix coverity-1604665

2024-07-17 Thread Neil Horman
Branch: refs/heads/openssl-3.0 Home: https://github.com/openssl/openssl Commit: 03d0fabaab0624f0972aa1335e107a1f2db6fa1f https://github.com/openssl/openssl/commit/03d0fabaab0624f0972aa1335e107a1f2db6fa1f Author: Neil Horman Date: 2024-07-17 (Wed, 17 Jul 2024) Changed paths

[openssl/openssl] ed96c0: Fix coverity-1604665

2024-07-17 Thread Neil Horman
Branch: refs/heads/openssl-3.2 Home: https://github.com/openssl/openssl Commit: ed96c0ddfa0ecab9e8ec3f7f0407b92b07908528 https://github.com/openssl/openssl/commit/ed96c0ddfa0ecab9e8ec3f7f0407b92b07908528 Author: Neil Horman Date: 2024-07-17 (Wed, 17 Jul 2024) Changed paths

[openssl/openssl] 05590a: Fix coverity-1604665

2024-07-17 Thread Neil Horman
Branch: refs/heads/openssl-3.1 Home: https://github.com/openssl/openssl Commit: 05590a929f161d632b3be3d265521c5e2d347e71 https://github.com/openssl/openssl/commit/05590a929f161d632b3be3d265521c5e2d347e71 Author: Neil Horman Date: 2024-07-17 (Wed, 17 Jul 2024) Changed paths

[openssl/openssl] 842959: Fix coverity-1604665

2024-07-17 Thread Neil Horman
Branch: refs/heads/openssl-3.3 Home: https://github.com/openssl/openssl Commit: 842959a0af1e661ee86e6e8327bab24143fa5f78 https://github.com/openssl/openssl/commit/842959a0af1e661ee86e6e8327bab24143fa5f78 Author: Neil Horman Date: 2024-07-17 (Wed, 17 Jul 2024) Changed paths

Re: Application segfaults after upgrade from 3.0.11 to 3.0.13

2024-07-16 Thread Neil Horman
Can you post the stack trace of the segv here? On Tue, Jul 16, 2024 at 12:43 PM Victor Wagner wrote: > Hi! > > I'm using osslsigncode application on Debian 12 system (amd64) to sign > stuff with RSA key stored on hardware token with PKCS11 interface. > > osslsigncode (https://github.com/mtrojnar

[openssl/openssl] 419fb4: Fix cmake generator

2024-07-16 Thread Neil Horman
Branch: refs/heads/openssl-3.3 Home: https://github.com/openssl/openssl Commit: 419fb4ea4be4c0b28c63b494ff30fa3510aba06e https://github.com/openssl/openssl/commit/419fb4ea4be4c0b28c63b494ff30fa3510aba06e Author: Neil Horman Date: 2024-07-16 (Tue, 16 Jul 2024) Changed paths

[openssl/openssl] c1a27b: Fix cmake generator

2024-07-16 Thread Neil Horman
Branch: refs/heads/master Home: https://github.com/openssl/openssl Commit: c1a27bdeb9a4f915aa92ed0e74ed48a1f9b94176 https://github.com/openssl/openssl/commit/c1a27bdeb9a4f915aa92ed0e74ed48a1f9b94176 Author: Neil Horman Date: 2024-07-16 (Tue, 16 Jul 2024) Changed paths

[openssl/openssl] 6ba2f4: Set down_load factor on hash table when culling it...

2024-07-16 Thread Neil Horman
Branch: refs/heads/openssl-3.2 Home: https://github.com/openssl/openssl Commit: 6ba2f4d3d524fdae5f6f8fe76e8d6b49ddaa1044 https://github.com/openssl/openssl/commit/6ba2f4d3d524fdae5f6f8fe76e8d6b49ddaa1044 Author: Neil Horman Date: 2024-07-16 (Tue, 16 Jul 2024) Changed paths

[openssl/openssl] 9f1bfa: Set down_load factor on hash table when culling it...

2024-07-16 Thread Neil Horman
Branch: refs/heads/openssl-3.1 Home: https://github.com/openssl/openssl Commit: 9f1bfa32bc5e8a108e78a464cdbc39ef43100e9b https://github.com/openssl/openssl/commit/9f1bfa32bc5e8a108e78a464cdbc39ef43100e9b Author: Neil Horman Date: 2024-07-16 (Tue, 16 Jul 2024) Changed paths

[openssl/openssl] ceaba9: Set down_load factor on hash table when culling it...

2024-07-16 Thread Neil Horman
Branch: refs/heads/openssl-3.0 Home: https://github.com/openssl/openssl Commit: ceaba9f807fe2fb2cad2789eb2b7a5bff24e1051 https://github.com/openssl/openssl/commit/ceaba9f807fe2fb2cad2789eb2b7a5bff24e1051 Author: Neil Horman Date: 2024-07-16 (Tue, 16 Jul 2024) Changed paths

[openssl/openssl] eead8d: Set down_load factor on hash table when culling it...

2024-07-16 Thread Neil Horman
Branch: refs/heads/openssl-3.3 Home: https://github.com/openssl/openssl Commit: eead8d77a240b69fc299cfffb998bd28eac02bd6 https://github.com/openssl/openssl/commit/eead8d77a240b69fc299cfffb998bd28eac02bd6 Author: Neil Horman Date: 2024-07-16 (Tue, 16 Jul 2024) Changed paths

[openssl/openssl] 01753c: Set down_load factor on hash table when culling it...

2024-07-16 Thread Neil Horman
Branch: refs/heads/master Home: https://github.com/openssl/openssl Commit: 01753c09bbfdffcefd555b4c21e50e68af346129 https://github.com/openssl/openssl/commit/01753c09bbfdffcefd555b4c21e50e68af346129 Author: Neil Horman Date: 2024-07-16 (Tue, 16 Jul 2024) Changed paths

[openssl/openssl] 988456: Fix coverity-1510058

2024-07-14 Thread Neil Horman
Branch: refs/heads/master Home: https://github.com/openssl/openssl Commit: 9884568569feb559cea2496a3326259a53db0860 https://github.com/openssl/openssl/commit/9884568569feb559cea2496a3326259a53db0860 Author: Neil Horman Date: 2024-07-15 (Mon, 15 Jul 2024) Changed paths

Re: Non-Programmatic Deterministic Key Generation for ED25519 and ED448 Keys

2024-07-14 Thread Neil Horman
I've never tried, but you might try replacing /dev/random with a pipe that reads data from an input file to make the entropy fetch deterministic. Note that's probably dangerous, so I'd recommend doing this in a container to isolate it from your running system On Sat, Jul 13, 2024, 8:52 PM Syfer S

[openssl/openssl] 42230f: Convert check-format-commits.sh to use allowlist

2024-07-13 Thread Neil Horman
Branch: refs/heads/master Home: https://github.com/openssl/openssl Commit: 42230f294ae97cbd50052038499e091d0060ba8e https://github.com/openssl/openssl/commit/42230f294ae97cbd50052038499e091d0060ba8e Author: Neil Horman Date: 2024-07-13 (Sat, 13 Jul 2024) Changed paths

[openssl/openssl] 40b02c: Set down_load factor on hash table when culling it...

2024-07-12 Thread Neil Horman
Branch: refs/heads/oss-fuzz-5363002606419968 Home: https://github.com/openssl/openssl Commit: 40b02c39a53f3002bfeb146a6ab38d9385acc479 https://github.com/openssl/openssl/commit/40b02c39a53f3002bfeb146a6ab38d9385acc479 Author: Neil Horman Date: 2024-07-12 (Fri, 12 Jul 2024

[openssl/tools] 6ef511: Add perftools repository to review-tools

2024-07-12 Thread Neil Horman
Branch: refs/heads/master Home: https://github.com/openssl/tools Commit: 6ef511a481b5275f85b287e2d352ed6f40335e0a https://github.com/openssl/tools/commit/6ef511a481b5275f85b287e2d352ed6f40335e0a Author: Neil Horman Date: 2024-07-12 (Fri, 12 Jul 2024) Changed paths: M

[openssl/openssl] 861e1f: ignore various files in commit checker

2024-07-11 Thread Neil Horman
Branch: refs/heads/master Home: https://github.com/openssl/openssl Commit: 861e1f450c808bdf675bbf0d3e17303a3f16d06c https://github.com/openssl/openssl/commit/861e1f450c808bdf675bbf0d3e17303a3f16d06c Author: Neil Horman Date: 2024-07-11 (Thu, 11 Jul 2024) Changed paths

[openssl/openssl] c86d37: Modify check-format to match line length coding style

2024-07-11 Thread Neil Horman
Branch: refs/heads/master Home: https://github.com/openssl/openssl Commit: c86d37cec919caf6ca71d093cff3e05ade1212fe https://github.com/openssl/openssl/commit/c86d37cec919caf6ca71d093cff3e05ade1212fe Author: Neil Horman Date: 2024-07-11 (Thu, 11 Jul 2024) Changed paths

Re: Can we provide --debug and --release on a single build?

2024-07-10 Thread Neil Horman
- release version (optimized) > > > > It seems they expect those file names and use them when generating a build > system with CMake. > > > > > > *Thom Bentley *| Senior Software Engineer | Medidata, a Dassault Systèmes > company <http://www.mdsol.com/> >

[openssl/openssl] ad45d7: Add a check-format-commit.sh script

2024-07-10 Thread Neil Horman
Branch: refs/heads/openssl-3.3 Home: https://github.com/openssl/openssl Commit: ad45d7630e64094eaab1a9763726e7ac34099b44 https://github.com/openssl/openssl/commit/ad45d7630e64094eaab1a9763726e7ac34099b44 Author: Neil Horman Date: 2024-07-10 (Wed, 10 Jul 2024) Changed paths

[openssl/openssl] 548469: Add a check-format-commit.sh script

2024-07-10 Thread Neil Horman
Branch: refs/heads/openssl-3.0 Home: https://github.com/openssl/openssl Commit: 548469f55f288502d5d4ebdf0b480fa8d8b37102 https://github.com/openssl/openssl/commit/548469f55f288502d5d4ebdf0b480fa8d8b37102 Author: Neil Horman Date: 2024-07-10 (Wed, 10 Jul 2024) Changed paths

[openssl/openssl] ab0c60: Add a check-format-commit.sh script

2024-07-10 Thread Neil Horman
Branch: refs/heads/openssl-3.2 Home: https://github.com/openssl/openssl Commit: ab0c60df1fd5983d737323e34360567464ab2c26 https://github.com/openssl/openssl/commit/ab0c60df1fd5983d737323e34360567464ab2c26 Author: Neil Horman Date: 2024-07-10 (Wed, 10 Jul 2024) Changed paths

[openssl/openssl] 67b23c: Add a check-format-commit.sh script

2024-07-10 Thread Neil Horman
Branch: refs/heads/openssl-3.1 Home: https://github.com/openssl/openssl Commit: 67b23c7bde37d4b4e49619d2a88afabec501bf72 https://github.com/openssl/openssl/commit/67b23c7bde37d4b4e49619d2a88afabec501bf72 Author: Neil Horman Date: 2024-07-10 (Wed, 10 Jul 2024) Changed paths

[openssl/openssl] acae12: Add a check-format-commit.sh script

2024-07-10 Thread Neil Horman
Branch: refs/heads/master Home: https://github.com/openssl/openssl Commit: acae12eb781658479b4fb3fee6334fd14a3c2739 https://github.com/openssl/openssl/commit/acae12eb781658479b4fb3fee6334fd14a3c2739 Author: Neil Horman Date: 2024-07-10 (Wed, 10 Jul 2024) Changed paths

[openssl/openssl] 6c99ea: read lock store on ossl_method_store_do_all

2024-07-09 Thread Neil Horman
Branch: refs/heads/openssl-3.0 Home: https://github.com/openssl/openssl Commit: 6c99ea780ff19a39f345c293a5f86b287e0f2b44 https://github.com/openssl/openssl/commit/6c99ea780ff19a39f345c293a5f86b287e0f2b44 Author: Neil Horman Date: 2024-07-09 (Tue, 09 Jul 2024) Changed paths

[openssl/openssl] d8def7: read lock store on ossl_method_store_do_all

2024-07-09 Thread Neil Horman
Branch: refs/heads/master Home: https://github.com/openssl/openssl Commit: d8def79838cd0d5e7c21d217aa26edb5229f0ab4 https://github.com/openssl/openssl/commit/d8def79838cd0d5e7c21d217aa26edb5229f0ab4 Author: Neil Horman Date: 2024-07-09 (Tue, 09 Jul 2024) Changed paths

[openssl/openssl] 7f3fd9: read lock store on ossl_method_store_do_all

2024-07-09 Thread Neil Horman
Branch: refs/heads/openssl-3.2 Home: https://github.com/openssl/openssl Commit: 7f3fd995b792461799c40c6daa4698eb30986de4 https://github.com/openssl/openssl/commit/7f3fd995b792461799c40c6daa4698eb30986de4 Author: Neil Horman Date: 2024-07-09 (Tue, 09 Jul 2024) Changed paths

[openssl/openssl] 56aee7: read lock store on ossl_method_store_do_all

2024-07-09 Thread Neil Horman
Branch: refs/heads/openssl-3.3 Home: https://github.com/openssl/openssl Commit: 56aee7cfaa46b2d465e2596a53b6e3c306f00356 https://github.com/openssl/openssl/commit/56aee7cfaa46b2d465e2596a53b6e3c306f00356 Author: Neil Horman Date: 2024-07-09 (Tue, 09 Jul 2024) Changed paths

[openssl/openssl] e909d0: read lock store on ossl_method_store_do_all

2024-07-09 Thread Neil Horman
Branch: refs/heads/openssl-3.1 Home: https://github.com/openssl/openssl Commit: e909d0a214bccc9a3bded1772b9bf8afb82b96e5 https://github.com/openssl/openssl/commit/e909d0a214bccc9a3bded1772b9bf8afb82b96e5 Author: Neil Horman Date: 2024-07-09 (Tue, 09 Jul 2024) Changed paths

[openssl/openssl] dd2b22: Add defaults api to openssl build

2024-07-09 Thread Neil Horman
Branch: refs/heads/master Home: https://github.com/openssl/openssl Commit: dd2b22d88c9c974f4ca6bce2550f89ac7fb76839 https://github.com/openssl/openssl/commit/dd2b22d88c9c974f4ca6bce2550f89ac7fb76839 Author: Neil Horman Date: 2024-07-09 (Tue, 09 Jul 2024) Changed paths

[openssl/technical-policies] d47609: Update to use @ syntax rather than \ syntax

2024-07-08 Thread Neil Horman
Branch: refs/heads/master Home: https://github.com/openssl/technical-policies Commit: d47609d0f393ed01b856b4ebea544bd9ee84d349 https://github.com/openssl/technical-policies/commit/d47609d0f393ed01b856b4ebea544bd9ee84d349 Author: Neil Horman Date: 2024-07-03 (Wed, 03 Jul 2024

[openssl/openssl] 2c7cae: Convert hashtable to using ossl_rcu_deref on lookup

2024-07-03 Thread Neil Horman
Branch: refs/heads/master Home: https://github.com/openssl/openssl Commit: 2c7cae53bc61f40baff70af0495cf3d976ed7d14 https://github.com/openssl/openssl/commit/2c7cae53bc61f40baff70af0495cf3d976ed7d14 Author: Neil Horman Date: 2024-07-03 (Wed, 03 Jul 2024) Changed paths

[openssl/openssl] fccefa: Remove appveyor badge and replace it with os zoo b...

2024-06-30 Thread Neil Horman
Branch: refs/heads/master Home: https://github.com/openssl/openssl Commit: fccefa7016b12dfcf362e6169ec3b3b4d0634498 https://github.com/openssl/openssl/commit/fccefa7016b12dfcf362e6169ec3b3b4d0634498 Author: Neil Horman Date: 2024-06-30 (Sun, 30 Jun 2024) Changed paths

[openssl/openssl] 68c757: Enable ipv6 use if available

2024-06-28 Thread Neil Horman
Branch: refs/heads/master Home: https://github.com/openssl/openssl Commit: 68c7575afc5ec33fd44c9c1c571d882d6095c8ef https://github.com/openssl/openssl/commit/68c7575afc5ec33fd44c9c1c571d882d6095c8ef Author: Neil Horman Date: 2024-06-28 (Fri, 28 Jun 2024) Changed paths

Re: Syntax of OID values

2024-06-27 Thread Neil Horman
I believe the oid_file key in the config is used by the ca and req applets and is meant to be a value rather than a section (i.e. oid_file = /path/to/oid/file/name) To do what I believe you are trying to do above, you need to follow the directions here: https://www.openssl.org/docs/man1.1.1/man5/c

Re: Issue building after configuring for VC-WIN64A (version 3.0.8)

2024-06-26 Thread Neil Horman
You will almost certainly need to preform an nmake distclean (or just run git clean on your tree) prior to reconfiguring. nmake is really bad about getting lost in dependency resolution. Its quite likely that there is a remaining object file somewhere that didn't get rebuilt for x64 when you ran

[openssl/openssl] f7252d: Some minor nit corrections in the thread code for rcu

2024-06-20 Thread Neil Horman
Branch: refs/heads/master Home: https://github.com/openssl/openssl Commit: f7252d736da65ffa41cd81c6e0ec5ee58160eeb4 https://github.com/openssl/openssl/commit/f7252d736da65ffa41cd81c6e0ec5ee58160eeb4 Author: Neil Horman Date: 2024-06-20 (Thu, 20 Jun 2024) Changed paths

[openssl/openssl] 83efcf: Make rcu_thread_key context-aware

2024-06-20 Thread Neil Horman
Branch: refs/heads/openssl-3.3 Home: https://github.com/openssl/openssl Commit: 83efcfdfa1de760bd30df7f4cf94e7a0d2b0db9f https://github.com/openssl/openssl/commit/83efcfdfa1de760bd30df7f4cf94e7a0d2b0db9f Author: Neil Horman Date: 2024-06-20 (Thu, 20 Jun 2024) Changed paths

[openssl/tools] 77a921: convert handshake test to use getopt

2024-06-10 Thread Neil Horman
Branch: refs/heads/master Home: https://github.com/openssl/tools Commit: 77a921ba29ce915a9a24bd1a10bbc311310247b6 https://github.com/openssl/tools/commit/77a921ba29ce915a9a24bd1a10bbc311310247b6 Author: Neil Horman Date: 2024-06-10 (Mon, 10 Jun 2024) Changed paths: M

Re: openssl hmac and key on the command line

2024-06-08 Thread Neil Horman
the openssl-mac utility already contains such a option (though it doesn't circumvent the issue as the option for the key is also passed on the command line) It seems some bash magic solves this problem though. By putting your key in a file, you can use command substitution to solve this: nhorman

[openssl/openssl] f596a4: Add defaults api to openssl build

2024-06-06 Thread Neil Horman
Branch: refs/heads/read-openssldir-from-registry Home: https://github.com/openssl/openssl Commit: f596a4f26a53e4bc78cca55c12e0ea0f48d80a63 https://github.com/openssl/openssl/commit/f596a4f26a53e4bc78cca55c12e0ea0f48d80a63 Author: Neil Horman Date: 2024-06-06 (Thu, 06 Jun 2024

[openssl/web] 07e937: remove FTP mirrors mentions

2024-06-05 Thread Neil Horman
) Commit: 0b3be3b1193f5f10a0f0badb42039bc02df4070d https://github.com/openssl/web/commit/0b3be3b1193f5f10a0f0badb42039bc02df4070d Author: Neil Horman Date: 2024-04-29 (Mon, 29 Apr 2024) Changed paths: M roadmap.md Log Message: --- update roadmap for 3.4 Fixes

[openssl/openssl] ef2c90: Add defaults api to openssl build

2024-06-03 Thread Neil Horman
Branch: refs/heads/read-openssldir-from-registry Home: https://github.com/openssl/openssl Commit: ef2c90a68e9a5dda1d466b9d3a1de99ec4e9c849 https://github.com/openssl/openssl/commit/ef2c90a68e9a5dda1d466b9d3a1de99ec4e9c849 Author: Neil Horman Date: 2024-06-03 (Mon, 03 Jun 2024

[openssl/tools] 2bd95f: adding a fetch test to perf tools

2024-05-27 Thread Neil Horman
Branch: refs/heads/master Home: https://github.com/openssl/tools Commit: 2bd95fa80df1fe091451015648cfe12476176f54 https://github.com/openssl/tools/commit/2bd95fa80df1fe091451015648cfe12476176f54 Author: Neil Horman Date: 2024-05-10 (Fri, 10 May 2024) Changed paths: M

Re: Need help on self test post failure - programmatically load FIPS provider

2024-05-24 Thread Neil Horman
I assume that, after building the openssl library you ran openssl fipsinstall? i.e. you're not just using a previously generated fipsmodule.cnf file? The above errors initially seem like self tests failed on the fips provider load, suggesting that the module-mac or install-mac is incorrect in you

Re: Blocking on a non-blocking socket?

2024-05-23 Thread Neil Horman
code, but it seems to be. If the underlying socket is in non-blocking mode, there should be no way for calls to block in SSL_read/SSL_write on the socket read/write system call. On Thu, May 23, 2024 at 8:15 AM Wiebe Cazemier wrote: > - Original Message - > > From: "Neil H

Re: Blocking on a non-blocking socket?

2024-05-23 Thread Neil Horman
do you have a stack trace of the thread hung in this state? That would confirm whats going on here Neil On Wed, May 22, 2024 at 11:12 PM udhayakumar wrote: > hi Wiebe Cazemier, > > The flag SSL_MODE_AUTO_RETRY will cause read/write operations to only > return after the handshake and successful

[openssl/installer] 6232f4: Adding initial windows installer

2024-05-17 Thread Neil Horman
Branch: refs/heads/main Home: https://github.com/openssl/installer Commit: 6232f4305f21f5d18eff4c3da8924c55c7ff0768 https://github.com/openssl/installer/commit/6232f4305f21f5d18eff4c3da8924c55c7ff0768 Author: Neil Horman Date: 2024-04-30 (Tue, 30 Apr 2024) Changed paths

Re: OpenSSL version 3.3.0 published

2024-05-16 Thread Neil Horman
Glad its working a bit better for you. If you are inclined, please feel free to open a PR with your changes for review. Best Neil On Thu, May 16, 2024 at 7:40 AM Dennis Clarke wrote: > On 5/15/24 18:34, Neil Horman wrote: > > You are correct, the files you reference (most of the

Re: OpenSSL version 3.3.0 published

2024-05-15 Thread Neil Horman
he targets you need. Regards Neil On Wed, May 15, 2024 at 4:12 PM Dennis Clarke wrote: > On 5/13/24 03:34, Matt Caswell wrote: > > > > > > On 13/05/2024 02:42, Neil Horman wrote: > >> We added support for RCU locks in 3.3 which required the use of > >>

Re: OpenSSL version 3.3.0 published

2024-05-12 Thread Neil Horman
We added support for RCU locks in 3.3 which required the use of atomics (or emulated atomic where they couldn't be supported), but those were in libcrypro not liberal On Sun, May 12, 2024, 7:26 PM Dennis Clarke via openssl-users < openssl-users@openssl.org> wrote: > > On 4/9/24 08:56, OpenSSL w

[openssl/tools] 9eb910: adding a fetch test to perf tools

2024-05-09 Thread Neil Horman
Branch: refs/heads/fetch-test Home: https://github.com/openssl/tools Commit: 9eb91089308e8994a5cfb29e1f07de79a6c9e8c1 https://github.com/openssl/tools/commit/9eb91089308e8994a5cfb29e1f07de79a6c9e8c1 Author: Neil Horman Date: 2024-05-07 (Tue, 07 May 2024) Changed paths

[openssl/openssl] 27504d: Coverity found the following issues:

2024-05-06 Thread Neil Horman
Branch: refs/heads/openssl-3.3 Home: https://github.com/openssl/openssl Commit: 27504de59586a23862f2f29e0d640b51d43ff24a https://github.com/openssl/openssl/commit/27504de59586a23862f2f29e0d640b51d43ff24a Author: Neil Horman Date: 2024-05-06 (Mon, 06 May 2024) Changed paths

[openssl/openssl] 2a5010: Add check for public key presence on sm2 signing

2024-05-02 Thread Neil Horman
Branch: refs/heads/openssl-3.0 Home: https://github.com/openssl/openssl Commit: 2a5010e31c6b9c5b4b570e038a0e3baec8268931 https://github.com/openssl/openssl/commit/2a5010e31c6b9c5b4b570e038a0e3baec8268931 Author: Neil Horman Date: 2024-05-02 (Thu, 02 May 2024) Changed paths

[openssl/openssl] 1316aa: Add check for public key presence on sm2 signing

2024-05-02 Thread Neil Horman
Branch: refs/heads/openssl-3.1 Home: https://github.com/openssl/openssl Commit: 1316aa05aae57cf47d8c8bfca38aaa042db1518f https://github.com/openssl/openssl/commit/1316aa05aae57cf47d8c8bfca38aaa042db1518f Author: Neil Horman Date: 2024-05-02 (Thu, 02 May 2024) Changed paths

[openssl/tools] cb9d81: adjust newraw key to record time like the handshak...

2024-05-02 Thread Neil Horman
Branch: refs/heads/master Home: https://github.com/openssl/tools Commit: cb9d8154dbb3cdbdf9d4225f9791da86d9a62a43 https://github.com/openssl/tools/commit/cb9d8154dbb3cdbdf9d4225f9791da86d9a62a43 Author: Neil Horman Date: 2024-04-30 (Tue, 30 Apr 2024) Changed paths: M

[openssl/openssl] 067fbc: Reduce optimization in hppa builds

2024-05-02 Thread Neil Horman
Branch: refs/heads/master Home: https://github.com/openssl/openssl Commit: 067fbc01b9e867b31c71091d62f0f9012dc9e41a https://github.com/openssl/openssl/commit/067fbc01b9e867b31c71091d62f0f9012dc9e41a Author: Neil Horman Date: 2024-05-02 (Thu, 02 May 2024) Changed paths

[openssl/tools] 352d32: adjust newraw key to record time like the handshak...

2024-05-01 Thread Neil Horman
Branch: refs/heads/fix-stats Home: https://github.com/openssl/tools Commit: 352d322c2ca5530de14f24436b92d550cfde0c77 https://github.com/openssl/tools/commit/352d322c2ca5530de14f24436b92d550cfde0c77 Author: Neil Horman Date: 2024-04-30 (Tue, 30 Apr 2024) Changed paths

[openssl/openssl] c04901: Fix alignment errors in hashtable fuzzer

2024-04-30 Thread Neil Horman
Branch: refs/heads/master Home: https://github.com/openssl/openssl Commit: c04901be78768eb698d575d0b046940a5cb2aa5b https://github.com/openssl/openssl/commit/c04901be78768eb698d575d0b046940a5cb2aa5b Author: Neil Horman Date: 2024-04-30 (Tue, 30 Apr 2024) Changed paths

[openssl/openssl] 3dcd85: Make a failure in ktls_sendfile a syscall error

2024-04-26 Thread Neil Horman
Branch: refs/heads/master Home: https://github.com/openssl/openssl Commit: 3dcd85139f30625f2e4d072fe2b0f211f76f819c https://github.com/openssl/openssl/commit/3dcd85139f30625f2e4d072fe2b0f211f76f819c Author: Neil Horman Date: 2024-04-26 (Fri, 26 Apr 2024) Changed paths

[openssl/openssl] badda7: Fix coverity-1596616

2024-04-26 Thread Neil Horman
Branch: refs/heads/master Home: https://github.com/openssl/openssl Commit: badda78325dd961fa41a107796f2744ffbe8b265 https://github.com/openssl/openssl/commit/badda78325dd961fa41a107796f2744ffbe8b265 Author: Neil Horman Date: 2024-04-26 (Fri, 26 Apr 2024) Changed paths

[openssl/openssl] b6456a: set module path from template

2024-04-26 Thread Neil Horman
Branch: refs/heads/openssl-3.0 Home: https://github.com/openssl/openssl Commit: b6456af5c043397998997a4f91348fb0aeca2625 https://github.com/openssl/openssl/commit/b6456af5c043397998997a4f91348fb0aeca2625 Author: Neil Horman Date: 2024-04-26 (Fri, 26 Apr 2024) Changed paths

[openssl/openssl] 71e5bb: set module path from template

2024-04-26 Thread Neil Horman
Branch: refs/heads/openssl-3.1 Home: https://github.com/openssl/openssl Commit: 71e5bb982f9c9563567ea8ae9f6e29492e9146ca https://github.com/openssl/openssl/commit/71e5bb982f9c9563567ea8ae9f6e29492e9146ca Author: Neil Horman Date: 2024-04-26 (Fri, 26 Apr 2024) Changed paths

Re: [OE-core] [poky][PATCH] Fix npm to use https rather than http

2022-08-26 Thread Neil Horman
Copy that, thanks! On Fri, Aug 26, 2022, 7:57 AM Ross Burton wrote: > > > On 26 Aug 2022, at 11:43, Luca Ceresoli via lists.openembedded.org > wrote: > > > > Apparently you prepared this patch within the poky git repository. You > > shouldn't do that, poky is an integration layer and should not

[OE-core] [poky][PATCH] Fix npm to use https rather than http

2022-08-25 Thread Neil Horman
f the npm tool don't handle 301 redirects properly, choosing to display the above error instead when using the default nodejs registry It would be good to go fix npm to handle the redirect properly, but it seems like it would also be good to assume secure http when contacting a

[Bug 1938591] Re: update 18.04 to readline8

2022-01-24 Thread Neil Horman
Sure, updating the 7.0 version to include the .pc file for readline is a fine approach to fixing this problem, but I dont think I would consider this a low priority issue. There are 37 non-ubuntu service accounts watching this bug, so it seems to have significant impact. Add to that the fact that

[Bug 1938591] Re: update 18.04 to readline8

2021-12-29 Thread Neil Horman
sooo...Is anyone going to bother looking into this? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1938591 Title: update 18.04 to readline8 To manage notifications about this bug go to: https://bugs

[Bug 1938591] [NEW] update 18.04 to readline8

2021-07-30 Thread Neil Horman
Public bug reported: libreadline up until version 8 didn't include a pkg-config file, and so any other package that relied on being able to find the readline libraries using the autoconf PKG_CHECK_MODULES macro failed in build. This has since been corrected, but I've received several reports of pe

Bug#466946: Bug#911043: On starting (and stopping) rngd

2020-11-11 Thread Neil Horman
t it and it will bail up sometime later because the entropy > source is unfit for use. On systemd you should watch that and don't > restart it aggressively or you'll waste one cpu core worth of busywork in > the worst case. Best case it sleeps. > > -- > Henrique de Moraes

Re: Bug#911043: On starting (and stopping) rngd

2020-11-11 Thread Neil Horman
t it and it will bail up sometime later because the entropy > source is unfit for use. On systemd you should watch that and don't > restart it aggressively or you'll waste one cpu core worth of busywork in > the worst case. Best case it sleeps. > > -- > Henrique de Moraes

Re: [PATCH] net: Get rid of consume_skb when tracing is off

2020-08-24 Thread Neil Horman
On Sat, Aug 22, 2020 at 12:49:02PM -0700, David Miller wrote: > > From: Neil Horman > > Neil, you might want to fix this so people can reply to you :-) Crap, thanks, new computer. Neil >

Re: [PATCH] net: Get rid of consume_skb when tracing is off

2020-08-22 Thread Neil Horman
On Sat, Aug 22, 2020 at 08:23:29AM +1000, Herbert Xu wrote: > The function consume_skb is only meaningful when tracing is enabled. > This patch makes it conditional on CONFIG_TRACEPOINTS. > > Signed-off-by: Herbert Xu > > diff --git a/include/linux/skbuff.h b/include/linux/skbuff.h > index 46881

Re: [dpdk-dev] [PATCH v5 7/9] devtools: support python3 only

2020-08-21 Thread Neil Horman
On Fri, Aug 21, 2020 at 10:14:50AM +0100, Louise Kilheeney wrote: > Changed script to explicitly use python3 only to avoid > maintaining python 2 and removed deprecation notice. > > Cc: Neil Horman > Cc: Ray Kinsella > > Signed-off-by: Louise Kilheeney >

Re: [dpdk-dev] [PATCH v5 3/9] usertools/dpdk-pmdinfo: support python3 only

2020-08-21 Thread Neil Horman
On Fri, Aug 21, 2020 at 10:14:46AM +0100, Louise Kilheeney wrote: > Changed script to explicitly use python3 only to avoid > maintaining python 2 and removed deprecation notice. > > Cc: Neil Horman > > Signed-off-by: Louise Kilheeney > Reviewed-by: Bruce Richardson &g

Re: [PATCHv2 net-next] dropwatch: Support monitoring of dropped frames

2020-08-05 Thread Neil Horman
On Tue, Aug 04, 2020 at 04:14:14PM -0700, David Miller wrote: > From: izabela.bakoll...@gmail.com > Date: Tue, 4 Aug 2020 18:09:08 +0200 > > > @@ -1315,6 +1334,53 @@ static int net_dm_cmd_trace(struct sk_buff *skb, > > return -EOPNOTSUPP; > > } > > > > +static int net_dm_interface_start(st

  1   2   3   4   5   6   7   8   9   10   >