In OpenSSL, the 'info_callback' gets a 'const SSL *' argument;
the application in question used 'SSL *', which caused the compiler
warning for 0.9.7 (earlier OpenSSL versions did not declare the
'info_callback' argument list at all).
The problem has been solved by changing the application
[[EMAIL PROTECTED] - Mon Feb 10 08:28:12 2003]:
# openssl ca -gencrl
Using configuration from /usr/local/ssl/openssl.cnf
Enter pass phrase for ./demoCA/private/cakey.pem:pass entered
-BEGIN X509 CRL-
snip
-END X509 CRL-
Segmentation fault
#
The revocation list
Hello Steve,
Stephen Henson via RT wrote:
[[EMAIL PROTECTED] - Fri Feb 7 14:09:28 2003]:
But OpenSSL tries to complete the server CA list with the certificates
set in the client CA list.
This can result in an invalid server CA list if the client CA list
contains a CA cert with a DN that
[[EMAIL PROTECTED] - Mon Feb 10 16:53:48 2003]:
Hello Steve,
Stephen Henson via RT wrote:
[[EMAIL PROTECTED] - Fri Feb 7 14:09:28 2003]:
There are a number of problems with it.
[...]
It really needs replacing with something less horrible. For example it
might:
1.
Hello Steve,
Stephen Henson via RT wrote:
[[EMAIL PROTECTED] - Mon Feb 10 16:53:48 2003]:
Stephen Henson via RT wrote:
[[EMAIL PROTECTED] - Fri Feb 7 14:09:28 2003]:
It really needs replacing with something less horrible. For example it
might:
1. Build the chain using the normal
[[EMAIL PROTECTED] - Mon Feb 10 20:02:40 2003]:
Hello Steve,
OK.
I should clarify myself:
It is to do it correctly, but not needed to fix the actual problem.
However option 4 easy to do and could be argued as being a bug fix.
OK.
Perhaps something like:
build the chain
Hello Steve,
Stephen Henson via RT wrote:
[[EMAIL PROTECTED] - Mon Feb 10 20:02:40 2003]:
OK.
I should clarify myself:
It is to do it correctly, but not needed to fix the actual problem.
However option 4 easy to do and could be argued as being a bug fix.
OK.
Perhaps something like:
Hi,
I had some problems building 0.9.7 on win32 using masm and VC.
I used the no-ripemd no-ssl2 arguments to mk1mf.pl, and then tried to
make. Apparently some ripemd files were still included in the makefile. To
work around this, I changed mk1mf.pl in line 887 to the following:
elsif