Re: [openssl.org #262] bug: init race in SSLv3_client_method

> > However, the assignments are not atomic. The following unprotected > > operation: > > > > if (init) > > { > > memcpy((char *)&SSLv3_server_data,(char *)sslv3_base_method(), > > sizeof(SSL_METHOD)); > > SSLv3_server_data.ssl_accept=ssl3_accept; > >

Re: SSL-0.9.7 RSA keys

On Fri, Sep 20, 2002, Chris Brook wrote: > I have found the problem and fixed it in my code, so please ignore. > However, for general info, it seems that the i2d_ low-level functions modify > the data pointer passed in (it is an unsigned char **), so I could not see > the result. Copying the poi

RE: SSL-0.9.7 RSA keys

I have found the problem and fixed it in my code, so please ignore. However, for general info, it seems that the i2d_ low-level functions modify the data pointer passed in (it is an unsigned char **), so I could not see the result. Copying the pointer to another and passing the address of that in

SSL-0.9.7 RSA keys

Using 0.9.7 beta 3, I am attempting to output an RSA public/private key pair created by RSA_generate_key() as ASN.1 encoded strings. For the public key, I am using i2d_RSA_PUBKEY which calls i2d_PUBKEY -> i2d_X509_PUBKEY. i2d_X509_PUBKEY seems to execute though I can't find the code anywhere in t

A small correction to avoid a warning in MSVC

Dear OpenSSL developers, I have noticed that a warning is issued when compiling Openssl in MSVC. To remove it I suggest the following two small changes: In file openssl/asn1_mac.h Change in the definition of M_ASN1_D2I_get_EXP_set_opt the line (void (*)())free_func, b,V_ASN1_UNIVERSAL) =

Re: [openssl.org #274] session ID length bug (in 0.9.6g and 0.9.7beta3)

On Fri, Sep 20, 2002 at 10:34:27AM +0200, Bodo Moeller wrote: > On Thu, Sep 19, 2002 at 01:44:01PM +0200, Bodo Moeller via RT wrote: > > > > I don't know why that message is empty. What I wrote is that this > should now be fixed in the current snapshots (0.9.6-stable and > 0.9.8-dev -- seems I

Re: [openssl.org #262] bug: init race in SSLv3_client_method

On Tue, Sep 03, 2002 at 05:29:41PM -0700, Patrick McCormick wrote: > I needed to add the following calls in my single-thread "openssl setup" code > to end several race conditions: > > SSLv23_client_method(); > SSLv2_client_method(); > SSLv3_client_method(); > TLSv1_client_method(); > S

Re: openssl ca mode

On Freitag, 20. September 2002 00:43, vze2ksv3 wrote: > Hi, > > I have downloaded openssl-engine-0.9.6g > > I try to run openssl ca -policy policy_anthing -out newcert.pem -passin > pass:whatever -key whatever > -extensions xpclient_ext -extfile xpextensions \ > -infiles newreq.pem > > It complain

Re: [openssl.org #262] bug: init race in SSLv3_client_method

On Thu, Sep 19, 2002 at 06:28:16PM -0700, Patrick McCormick wrote: >> No locking should be needed because the assignments are idempotent. > However, the assignments are not atomic. The following unprotected > operation: > > if (init) > { > memcpy((char *)&SSLv3_server_data

Re: [openssl.org #262] bug: init race in SSLv3_client_method

On Thu, Sep 19, 2002 at 06:28:16PM -0700, Patrick McCormick wrote: >> No locking should be needed because the assignments are idempotent. > However, the assignments are not atomic. The following unprotected > operation: > > if (init) > { > memcpy((char *)&SSLv3_server_data,

Re: [openssl.org #274] session ID length bug (in 0.9.6g and 0.9.7beta3)

On Thu, Sep 19, 2002 at 01:44:01PM +0200, Bodo Moeller via RT wrote: > I don't know why that message is empty. What I wrote is that this should now be fixed in the current snapshots (0.9.6-stable and 0.9.8-dev -- seems I forgot about 0.9.7-stable, this will have the fix tomorry). -- Bodo M

[openssl.org #287] [PATCH] no-engine (openssl-0.9.7-stable-SNAP-20020918)

Here is the patch for configuring-out the engine. This one should work; the previous one had a single misplaced #ifndef. I've tested it both with and without the no-engine option for the following platforms: Cygwin VC-WIN32 (dll and static) VC-CE (dll and static)