Bug in ssl_asn1.s/d2i_SSL_SESSION()

Hi I think I found a bug (which has no real effect) in d2i_SSL_SESSION(). In the code snippet below from my point of view the SSL3_VERSION should read SSL3_VERSION_MAJOR or even 3 (literal)! if ((ssl_version>>8) == SSL3_VERSION) i=SSL3_MAX_SSL_SESSION_ID_LENGTH; el

[openssl.org #534] BUG: Buffer overrun after calling X509_gmtime_adj

[EMAIL PROTECTED] - Wed Mar 12 00:13:24 2003]: > Stephen Henson via RT wrote: > > > > > > > > Have you tried this in OpenSSL 0.9.7a? > > > I should have mentioned... this is with OpenSSL 0.9.7a. > > See o_time.c line 82: > > ts = gmtime(timer); > if (ts != NULL) > m

Re: [openssl.org #536] Bug in kssl ?

On Wednesday 12 Mar 2003 16:48, [EMAIL PROTECTED] via RT wrote: A further check showed it is in kssl_TKT2tkt after the kssl_build_principal_2, because asn1ticket->encdata->kvno is NULL. I get the same error on Solaris 2.8 with MIT Kerberos 1.2.4 new5ticket->enc_part.kvno = asn1ticket->

Re: [openssl.org #521] [PATCH] Avoid uninitialized data in randombuffer

Nils Larsch via RT wrote: Daniel Brahneborg via RT wrote: I'm using Valgrind to debug a program that uses the OpenSSL libraries, and got warnings about uninitialized data in the function RSA_padding_add_PKCS1_type_2(), on the line with "} while (*p == '\0');" (line 171 in version 0.9.7a). The foll

Re: [PATCH] Howard Chu's EBCDIC-Port upgrade patch

On Mon, Mar 03, 2003 at 05:34:20PM +0100, Richard Levitte - VMS Whacker wrote: > I'm surprised by how little seems to need changed. Is that really > possible? I imagined the EBCDIC issue was a much bugger can of worms. The majority of the EBCDIC changes are already in the code, and run in produc

CMP (rfc2510)

Hi, I'm planning on developing a fully CMP-support code, should I go ahead or is there somone already working on it ?   In the case where I should go ahead, shall I use all the available openssl structures, X509_PUBKEY for exemple, although CMP is not linked to X509 ?   By the way, I'ld like

[PATCH] crypto/rand/randfile.c

Two Problems: 1) Because fcntl.h is not included (in unix), O_CREAT is not available, so the logic to attempt to create with 0600 cannot happen at file creation time. 2) Because we fopen() with mode "wb", the file gets momentarily truncated, so when we are running multiple instances of openssl, w

Re: [openssl.org #521] [PATCH] Avoid uninitialized data in randombuffer

I think there's we need to create a FAQ entry about this ... * Daniel Brahneborg ([EMAIL PROTECTED]) wrote: [snip] > At lines 467-469 in crypto/rand/md_rand.c is an interesting > thing: > > #ifndef PURIFY > MD_Update(&m,buf,j); /* purify complains */ > #endif > > That is the code that caus

Re: [openssl.org #521] [PATCH] Avoid uninitialized data in random buffer

I think there's we need to create a FAQ entry about this ... * Daniel Brahneborg ([EMAIL PROTECTED]) wrote: [snip] > At lines 467-469 in crypto/rand/md_rand.c is an interesting > thing: > > #ifndef PURIFY > MD_Update(&m,buf,j); /* purify complains */ > #endif > > That is the code that cau

Re: CMP (rfc2510)

On Fri, Mar 07, 2003, Frédéric Giudicelli wrote: > Hi, > I'm planning on developing a fully CMP-support code, should I go ahead or is > there somone already working on it ? > I can't recall anyone mentioning this. > In the case where I should go ahead, shall I use all the available openssl > st

Re: [openssl.org #536] Bug in kssl ?

I will look into this in a few days.  I am sorry but I do not have the time at the moment.  - Jeff Markus Moeller wrote: On Wednesday 12 Mar 2003 16:48, [EMAIL PROTECTED] via RT wrote: A further check showed it is in kssl_TKT2tkt after the kssl_build_principal_2, because asn1ticket->en

DES/CBC question

Hi,   I am developing a cipher encryption tool in c++ using your openssl-crypto library.   The result encrypted string is passed to another system for decryption and vice versa, in which the cipher encryption tool was developed in Java, cipher algorithm is DES, mode is CBC, PKCS 5 padding.