[openssl.org #775]

2003-11-21 Thread via RT
tst __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

Re: Stalling hardware randomness a possible problem.

2003-11-21 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Fri, 21 Nov 2003 17:47:45 -0500, Geoff Thorpe <[EMAIL PROTECTED]> said: geoff> On November 21, 2003 05:29 pm, Richard Levitte - VMS Whacker wrote: geoff> > An option that leaves the decision right back into the hands of the geoff> > user would be to have an extra

Re: Stalling hardware randomness a possible problem.

2003-11-21 Thread Geoff Thorpe
On November 21, 2003 05:29 pm, Richard Levitte - VMS Whacker wrote: > An option that leaves the decision right back into the hands of the > user would be to have an extra ENGINE_set_defaults() flag called > ENGINE_METHOD_RAND_SEED, and when that is used, the RAND_METHOD given > by the engine is han

Re: Stalling hardware randomness a possible problem.

2003-11-21 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Fri, 21 Nov 2003 17:07:25 -0500, Geoff Thorpe <[EMAIL PROTECTED]> said: geoff> > For 0.9.7-stable, I suggest the following hack: geoff> > geoff> > have hwcrhk_rand_bytes and hwcrhk_rand_status check a static variable geoff> > (initilized to 0), and if it's 0, the

Re: Stalling hardware randomness a possible problem.

2003-11-21 Thread Geoff Thorpe
On November 20, 2003 08:49 pm, Richard Levitte - VMS Whacker wrote: > I think piggy-backing would be the best approach. At this point, I'm > seriously messing the function pointer int (*poll)(void) in > RAND_METHOD (I can add it to 0.9.8-dev, but I think we need to do > something for 0.9.7-stable

Re: Verification of cert w/o keyCertSign

2003-11-21 Thread Dave Roberts
On Fri, 21 Nov 2003, Dr. Stephen Henson wrote: > Well yes except there's a broken certificate workaround in there... > > One rather important CA excludes basicConstraints in its "CA" certificate but > includes keyUsage+keyCertSign so it will tolerate this case. Very broken certificate. Rather t

[openssl.org #725] compile error on SunOS 4.1.4

2003-11-21 Thread Lutz Jaenicke via RT
[EMAIL PROTECTED] - Mon Oct 6 17:05:28 2003]: > Hi, > > while upgrading to 0.9.7c on my old SunOS 4.1.4 box I am getting the > following error: > > | making all in test... > | if [ "" = "hpux-shared" -o "" = "darwin-shared" ] ; then \ > | gcc -o destest -I.. -I../include -DOPENSSL_SYSNAME_S

[openssl.org #726] bug report, help request...

2003-11-21 Thread Lutz Jaenicke via RT
[EMAIL PROTECTED] - Mon Oct 6 17:08:31 2003]: > While running the "make" command to build version 9.7c, I get the > following errors. My system is OpenBSD i386. Please help me fix this > bug, if it is in fact a bug with OpenSSL ... > des-586.s:2458: Error: Unimplemented segment type 151680 in

Re: Verification of cert w/o keyCertSign

2003-11-21 Thread Dr. Stephen Henson
On Fri, Nov 21, 2003, Dave Roberts wrote: > On Thu, 20 Nov 2003, Dr. Stephen Henson wrote: > > > Cert1 has keyUsage keyCertSign set. Its issuer and subject names are > > identical. > > > > Cert2 includes keyUsage and does *not* have keyCertSign set. Its issuer and > > subject names are identical

Re: Verification of cert w/o keyCertSign

2003-11-21 Thread Dave Roberts
On Thu, 20 Nov 2003, Dr. Stephen Henson wrote: > Cert1 has keyUsage keyCertSign set. Its issuer and subject names are > identical. > > Cert2 includes keyUsage and does *not* have keyCertSign set. Its issuer and > subject names are identical *and* identical to Cert1. > > The two certificates have

[openssl.org #731] Patch for Makefile.org and openssl.spec for /usr/lib/pkgconfig mode

2003-11-21 Thread Lutz Jaenicke via RT
[EMAIL PROTECTED] - Mon Oct 13 09:24:50 2003]: > How do you do? > > I found it is impossible to create RPM packages > of Openssl 0.9.7c with the openssl.spec in the > source archive. There is an failure in Makefile.org. > Mode of directory /usr/lib/pkgconfig is set to > 0644. Thanks. The bug ha