[openssl.org #491] [Fwd: Bug#180067: openssl: 0.9.7 causes gcc in sid to output warnings]

2003-02-10 Thread Bodo Moeller via RT
In OpenSSL, the 'info_callback' gets a 'const SSL *' argument; the application in question used 'SSL *', which caused the compiler warning for 0.9.7 (earlier OpenSSL versions did not declare the 'info_callback' argument list at all). The problem has been solved by changing the application

[openssl.org #496] BUG: openssl v 0.9.7 openssl ca -gencrls

2003-02-10 Thread Stephen Henson via RT
[[EMAIL PROTECTED] - Mon Feb 10 08:28:12 2003]: # openssl ca -gencrl Using configuration from /usr/local/ssl/openssl.cnf Enter pass phrase for ./demoCA/private/cakey.pem:pass entered -BEGIN X509 CRL- snip -END X509 CRL- Segmentation fault # The revocation list

Re: [openssl.org #492] SSL: server root certs and client auth.

2003-02-10 Thread Gtz Babin-Ebell
Hello Steve, Stephen Henson via RT wrote: [[EMAIL PROTECTED] - Fri Feb 7 14:09:28 2003]: But OpenSSL tries to complete the server CA list with the certificates set in the client CA list. This can result in an invalid server CA list if the client CA list contains a CA cert with a DN that

[openssl.org #492] SSL: server root certs and client auth.

2003-02-10 Thread Stephen Henson via RT
[[EMAIL PROTECTED] - Mon Feb 10 16:53:48 2003]: Hello Steve, Stephen Henson via RT wrote: [[EMAIL PROTECTED] - Fri Feb 7 14:09:28 2003]: There are a number of problems with it. [...] It really needs replacing with something less horrible. For example it might: 1.

Re: [openssl.org #492] SSL: server root certs and client auth.

2003-02-10 Thread Götz Babin-Ebell via RT
Hello Steve, Stephen Henson via RT wrote: [[EMAIL PROTECTED] - Mon Feb 10 16:53:48 2003]: Stephen Henson via RT wrote: [[EMAIL PROTECTED] - Fri Feb 7 14:09:28 2003]: It really needs replacing with something less horrible. For example it might: 1. Build the chain using the normal

[openssl.org #492] SSL: server root certs and client auth.

2003-02-10 Thread Stephen Henson via RT
[[EMAIL PROTECTED] - Mon Feb 10 20:02:40 2003]: Hello Steve, OK. I should clarify myself: It is to do it correctly, but not needed to fix the actual problem. However option 4 easy to do and could be argued as being a bug fix. OK. Perhaps something like: build the chain

Re: [openssl.org #492] SSL: server root certs and client auth.

2003-02-10 Thread Götz Babin-Ebell via RT
Hello Steve, Stephen Henson via RT wrote: [[EMAIL PROTECTED] - Mon Feb 10 20:02:40 2003]: OK. I should clarify myself: It is to do it correctly, but not needed to fix the actual problem. However option 4 easy to do and could be argued as being a bug fix. OK. Perhaps something like:

[openssl.org #497] Bug report: openssl-0.9.7 make errors (no-ripemd, no-ssl2)

2003-02-10 Thread Tal Mozes via RT
Hi, I had some problems building 0.9.7 on win32 using masm and VC. I used the no-ripemd no-ssl2 arguments to mk1mf.pl, and then tried to make. Apparently some ripemd files were still included in the makefile. To work around this, I changed mk1mf.pl in line 887 to the following: elsif