[openssl.org #248] bad serial number length

2002-10-09 Thread Richard Levitte via RT
[steve - Fri Aug 30 19:52:43 2002]: [[EMAIL PROTECTED] - Mon Aug 26 10:33:29 2002]: I found the solution: I just commented out the lines 675-676 in apps/ca.c - now everything works as expected. Since this just disables the check it isn't a good idea. The error message

Re: SSL on Vxworks

2002-10-09 Thread Bill Pringlemeir
srivani I have ported SSL 0.9.6 onto Vxworks. I could successfully srivani test all the symmetric algorithms. But while testing RSA and srivani DSA, I am not able to generate prime numbers successfully srivani and the trace always points here, With every vxWorks question, you should state

email vs. emailAddress (was Re: wrong defines SN_xyz)

2002-10-09 Thread Harald Koch
On Tue, Apr 02, 2002 at 09:25:00AM +0200, Michael Bell wrote: after I found the wrong definitions of SN_surname and SN_serialNumber I looked around and find the next problems in crypto/objects/ : SN_titletitle (now T) SN_description

Re: [openssl.org #253] [bug] [patch] openssl 0.9.7-beta3 - vxworks compilation

2002-10-09 Thread Bill Pringlemeir
Zoran But before that, after doing some tests, I found out that we Zoran need to keep some version of RAND_poll (the patch removes it, Zoran and then the system does not seem to like that; something Zoran about unresolved symbols and stuff ;-) ). A google search Zoran returns this message

[openssl.org #232] test_des fails

2002-10-09 Thread HP-UnitedKingdom,ex2
Hi I am trying to compiled openssl 9.6g on redhat 7.3 I am running ./config --prefix=/usr --openssldir=/usr/local/ssl -shared my make runs ok, but on make test I get make[1]: *** [test_des] Segmentation fault I notice you have had a similar problem. Did you get a response to this ? are you

Re: email vs. emailAddress (was Re: wrong defines SN_xyz)

2002-10-09 Thread Michael Bell
Harald Koch wrote: On Tue, Apr 02, 2002 at 09:25:00AM +0200, Michael Bell wrote: after I found the wrong definitions of SN_surname and SN_serialNumber I looked around and find the next problems in crypto/objects/ : SN_titletitle (now T) SN_description

UNIX command to verify the Trusted Cert

2002-10-09 Thread Scott Harris
Does any body knows the command to use in UNIX to see what trusted certificates are installed on it. I copied the Trusted Certificated of CAin .DER format genereated using Microsoft Certificate Server. I am unable to verify it if it in the right place on the UNIX server. IS there a default

[openssl.org #301] Seg Fault with make test openssl 9-6g redhat 7.3 default gcc 2.4. 18 kernel

2002-10-09 Thread HP-UnitedKingdom,ex2
Hi, using the config --prefix=/usr --openssldir=/usr/local/ssl -threads command. I do a sucessfull make I then run make test and get a segmentation fault. Please find attatched the output from a make report. I am using openssl 9.6g Redhat 7.3 2.4.18 Kernel gcc2.96-110 (default redhat 7.3

Re: [openssl.org #248] bad serial number length

2002-10-09 Thread Olaf Zaplinski
Richard Levitte via RT wrote: What happens is that if serial contains '00' when you sign, the DB_serial field in index.txt will end up containing '0', not '00'. The next time you try to sign a certificate, 'openssl ca' will notice that the DB_serial field has an incorrect length (the

[openssl.org #253] [bug] [patch] openssl 0.9.7-beta3 - vxworks compilation

2002-10-09 Thread Richard Levitte via RT
OK, I've made all the changes and committed, with only one exception: I haven't changed Makefile.org to have different targets for different builds. I want to ponder a little more on the best way to do that without breaking everything for those that count on DIRS to look the way it

Re: cvs commit: openssl/doc/crypto PKCS12_parse.podPKCS7_encrypt.pod

2002-10-09 Thread Richard Levitte - VMS Whacker
Shouldn't all these new manuals go into the 0.9.7 branch as well? -- Richard Levitte \ Spannvägen 38, II \ [EMAIL PROTECTED] Redakteur@Stacken \ S-168 35 BROMMA \ T: +46-8-26 52 47 \ SWEDEN \ or +46-708-26 53 44 Procurator Odiosus Ex Infernis

[openssl.org #253] [bug] [patch] openssl 0.9.7-beta3 - vxworks compilation

2002-10-09 Thread Richard Levitte via RT
[levitte - Wed Oct 9 15:48:47 2002]: OK, I've made all the changes and committed, with only one exception: I haven't changed Makefile.org to have different targets for different builds. I want to ponder a little more on the best way to do that without breaking everything for those

Re: Fault tolerance

2002-10-09 Thread Geoff Thorpe
Hi there, On Tuesday 08 Oct 2002 9:01 am, Frederic DONNAT wrote: I'd like to know the better way to be fault tolerant when using a cryto accelerator through an engine. An ENGINE handle (functional reference) is attached to each key structure (RSA, DSA, etc) upon creation and released on

[openssl.org #144] declaration bug between openssl.c / apps.c

2002-10-09 Thread Richard Levitte via RT
I just commited the change for the config variable. However, non-monolith is really low priority right now, so I'm stalling this ticket for now. [[EMAIL PROTECTED] - Fri Jul 12 09:07:56 2002]: line 142 openssl.c: CONF *config=NULL; needed by apps.c line 1325: int load_config(BIO

ssl_read

2002-10-09 Thread Frank Mak
When I using eith 9.6b or 9.6g , I have problem when the server I try to connect is down. ssl_read() will wait for ever to return. Did anyone see this problem? Frank

Re: .PEM certificate format

2002-10-09 Thread Richard Levitte - VMS Whacker
In message [EMAIL PROTECTED] on Wed, 9 Oct 2002 10:33:55 -0700 (PDT), Scott Harris [EMAIL PROTECTED] said: awanf In general whats the process to convert a certificate from .cer awanf (der format) to .pem? openssl x509 -in foo.cer -inform d -out foo.pem -- Richard Levitte \ Spannvägen 38,

Re: Fault tolerance

2002-10-09 Thread Vadim Fedukovich
On Tue, Oct 08, 2002 at 03:01:43PM +0200, Frederic DONNAT wrote: Hi all, I'd like to know the better way to be fault tolerant when using a cryto accelerator through an engine. In fact, we want to redirect all crypto computations provided by our engine to soft ones when an error occured

RE: [openssl.org #253] [bug] [patch] openssl 0.9.7-beta3 - vxwo rks compilation

2002-10-09 Thread Zoran Milojevic via RT
Tried the CVS, and in order to make it compile ok and have no unresolved symbols, something like this patch is needed: (adds a missing RAND_poll, and removes RAND_query_egd_bytes, since this is not invoked any more by empty RAND_poll) diff -u -r openssl/crypto/rand/rand_egd.c

makedepend warnings

2002-10-09 Thread Zoran Milojevic
Hello. Today's snapshot generates warnings like these while making depend: (after removing clutter and piping through sort and uniq) makedepend: warning: ../../include/openssl/asn1.h includes ../../include/openssl/e_os2.h more than once! makedepend: warning: ../../include/openssl/x509.h

Revisiting AES_ctr128_encrypt() bugs

2002-10-09 Thread Eric Cronin
There have been two or three earlier threads on the potential uninitialized reads/overflows of tmp in AES_ctr128_encrypt, as well as it fact that it cannot be used for lengths not a multiple of the AES blocksize, but it does not look like anything has been done to fix it yet. In one of the