[openssl.org #552] [Fwd: Bug#186490: libssl0.9.7: EVP_{En,De}cryptFinal() don't free ctx parameter]

2003-03-31 Thread Stephen Henson via RT
An application should call EVP_CIPHER_CTX_cleanup() after a cipher context is finished with to free up any allocated memory. Before 0.9.7 not calling this function on a ctx wouldn't leak memory but it would still leave sensitive information around: so calling it was always a good idea. Unfortuna

[openssl.org #401] Bug in openssl-0.9.7-stable install_docs (head3)

2003-03-31 Thread Stephen Henson via RT
[geoff - Tue Apr 1 02:45:20 2003]: > OK, Steve's just updated the head of CVS by removing the "=head3" tags > as I'd already done in 0.9.7-stable. I had resisted doing this in the > head whilst making attempts to discuss the alternative of improving > our > pod compilation. Unfortunately those a

[openssl.org #401] Bug in openssl-0.9.7-stable install_docs (head3)

2003-03-31 Thread Geoff Thorpe via RT
OK, Steve's just updated the head of CVS by removing the "=head3" tags as I'd already done in 0.9.7-stable. I had resisted doing this in the head whilst making attempts to discuss the alternative of improving our pod compilation. Unfortunately those attempts fell on deaf ears, so I'm officially gi

RE: [openssl.org #558] Patch Openssl 0.9.7a for AIX 5.2 to use /dev/urandom

2003-03-31 Thread Howard Chu
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Dilkie, Lee > > This is a non-issue; they are two different ways of saying > > the same thing. > > The AIX description is the same one all Unix systems with > > select() have used > > since... 4.2BSD. I do

Re: [openssl.org #558] Patch Openssl 0.9.7a for AIX 5.2 to use /dev/urandom

2003-03-31 Thread Rich Salz
select() expects the first parameter to contain the number of fd's to be checked in all flavours of Unix. No. It is 1+(maxfd). Traditioanlly they are the same, but for long-running servers that open and close things and have "holes" they won't be. /r$ _

RE: [openssl.org #558] Patch Openssl 0.9.7a for AIX 5.2 to use /dev/urandom

2003-03-31 Thread Dilkie, Lee
> This is a non-issue; they are two different ways of saying > the same thing. > The AIX description is the same one all Unix systems with > select() have used > since... 4.2BSD. I don't recall if 4.1 had select() or not. > > Think about it. The fdset is a bit field. The nfds parameter > tells

RE: [openssl.org #558] Patch Openssl 0.9.7a for AIX 5.2 to use /dev/urandom

2003-03-31 Thread Chris Brook
select() expects the first parameter to contain the number of fd's to be checked in all flavours of Unix. Andreas is confusing the number of fd's to be checked (n) with the numbering of fd's (0 -(n-1)). This may explain some bugs :-) Chris Brook -Original Message- From: [EMAIL PROTECTED] [

RE: [openssl.org #558] Patch Openssl 0.9.7a for AIX 5.2 to use /dev/urandom

2003-03-31 Thread Howard Chu
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Lutz Jaenicke via RT > On Mon, Mar 31, 2003 at 10:54:31AM +0200, > [EMAIL PROTECTED] via RT wrote: > > Since 5.2 AIX supports /dev/random and /dev/urandom. > Openssl don't use it > > because the select > >

RSA Blinding patch and a recent snapshot.

2003-03-31 Thread Greaney, Kevin
Title: RSA Blinding patch and a recent snapshot.  Hi,     I downloaded a snapshot recently, openssl-e-0.9.6-stable-SNAP-20030327.tar.gz,  and was comparing the files [.crypto.rsa]rsa_eay.c AND [.crypto.rsa]rsa_lib.c.  I noticed  that in rsa_eay.c that the patch used the "positive" whe

Re: [openssl.org #558] Patch Openssl 0.9.7a for AIX 5.2 to use /dev/urandom

2003-03-31 Thread Lutz Jaenicke via RT
On Mon, Mar 31, 2003 at 10:54:31AM +0200, [EMAIL PROTECTED] via RT wrote: > Since 5.2 AIX supports /dev/random and /dev/urandom. Openssl don't use it > because the select > system call works different on AIX than on linux. > > As described in the following URL, the select system call expects the

Re: [openssl.org #554] Fw: FreeBSD Problem

2003-03-31 Thread RCS via RT
Shouldn't the configure script take care of this automatically? - Original Message - From: "Richard Levitte via RT" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Monday, March 31, 2003 10:07 AM Subject: [openssl.org #554] Fw: FreeBSD Problem > > You might

Re: [openssl.org #555] RSA blinding MT patch

2003-03-31 Thread Bodo Moeller via RT
On Mon, Mar 31, 2003 at 03:01:10PM +0200, Richard Levitte via RT wrote: > Could you please download the latest 0.9.6 snapshot and check that > it works for you? As far as I understand, the MT issue has been > adressed, but solved in a different manner. The latest snapshots have not been fixed,

[openssl.org #554] Fw: FreeBSD Problem

2003-03-31 Thread Richard Levitte via RT
You might want to investigate why there isn't a dso_win32.o... [EMAIL PROTECTED] - Fri Mar 28 08:20:27 2003]: > Sorry I meant I edited the $HOME/crypto/dso/Makefile.ssl file. > > - Original Message - > From: RCS > To: [EMAIL PROTECTED] > Sent: Thursday, March 27, 2003 9:35 PM > Subject:

[openssl.org #556] x509 -setalias

2003-03-31 Thread Richard Levitte via RT
Fixed. Thanks. Ticket resolved. [EMAIL PROTECTED] - Fri Mar 28 14:06:43 2003]: > Hi, > > I discovered that -setalias in apps/x509.c is tested twice. It's not a > real bug but it is unnecessary. I use 0.9.7a. > > Best regards > > Michael -- Richard Levitte [EMAIL PROTECTED] __

[openssl.org #559] X509V3_extensions_print

2003-03-31 Thread Richard Levitte via RT
[EMAIL PROTECTED] - Mon Mar 31 13:12:19 2003]: > The code fails because of the following: > > 1. title is empty --> indent will not be incremented > 2. if (BIO_printf(bp,"%*s",indent, "") <= 0) return 0; > This printf tries to print an empty string. > > Printf returns in this case a zero wh

[openssl.org #560] fingerprint in apps/crl.c

2003-03-31 Thread Richard Levitte via RT
Applied. Thanks. Ticket resolved. [EMAIL PROTECTED] - Mon Mar 31 14:44:47 2003]: > Hi, > > the fingerprint option in apps/crl.c is not documented in 0.9.7a if > the > online help is used. The simple patch is attached. > > Best regards > > Michael -- Richard Levitte [EMAIL PROTECTED]

[openssl.org #555] RSA blinding MT patch

2003-03-31 Thread Richard Levitte via RT
Could you please download the latest 0.9.6 snapshot and check that it works for you? As far as I understand, the MT issue has been adressed, but solved in a different manner. [EMAIL PROTECTED] - Fri Mar 28 08:22:16 2003]: > This patch fixes the multithreading issues I was having when an RSA

[openssl.org #560] fingerprint in apps/crl.c

2003-03-31 Thread Michael Bell via RT
Hi, the fingerprint option in apps/crl.c is not documented in 0.9.7a if the online help is used. The simple patch is attached. Best regards Michael -- --- Michael Bell Email: [EMAIL PROTECTED] ZE Computer- und M

[openssl.org #559] X509V3_extensions_print

2003-03-31 Thread Michael Bell via RT
Hi, I tried to output the extensions without a title: X509V3_extensions_print (out, NULL, ci->extensions, 0, 0); The code fails because of the following: 1. title is empty --> indent will not be incremented 2. if (BIO_printf(bp,"%*s",indent, "") <= 0) return 0; This printf tries to print a

[openssl.org #558] Patch Openssl 0.9.7a for AIX 5.2 to use /dev/urandom

2003-03-31 Thread [EMAIL PROTECTED] via RT
Hello! Since 5.2 AIX supports /dev/random and /dev/urandom. Openssl don't use it because the select system call works different on AIX than on linux. As described in the following URL, the select system call expects the number of file describtors as first parameter in AIX. Linux expects the high