RE: openssl 0.9.7d as an security risk

2004-10-15 Thread Mosteika, Paul Edward (OpenVMS Engineering)
Hi, I just tripped across this same problem yesterday. Which modules is it? I'd like to fix this for OpenVMS. Paul -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of dalini Sent: Thursday, October 14, 2004 7:17 PM To:

Re: openssl 0.9.7d as an security risk

2004-10-15 Thread Ives Steglich
Mosteika, Paul Edward (OpenVMS Engineering) wrote: Hi, I just tripped across this same problem yesterday. Which modules is it? I'd like to fix this for OpenVMS. Date: 2004-Mar-24 00:57:23 (UTC) Comment: Make S/MIME encrypt work again. http://cvs.openssl.org/chngview?cn=12080 (non fips version)

RE: openssl 0.9.7d as an security risk

2004-10-15 Thread Mosteika, Paul Edward (OpenVMS Engineering)
Hi, Yes thank you very much. I did see in pk7_doit.c module, where the PKCS7_dataInit() routine calls PKCS7_get_octet_string() with what seems to be an uninitialized PKCS7 field: -32070: os = PKCS7_get_octet_string(p7-d.sign-contents); DBG ex p7-d.sign-contents

[openssl.org #956] engine code in ECDSA and ECDH

2004-10-15 Thread Maxim Masiutin via RT
Hello, I was compiling a lightweight version of OpenSSL to utilize ECDSA and ECDH code. I liked that code very much! I did use the OPENSSL_NO_ENGINE define. However, the ECDSA and ECDH files didn't honour this define. Could you please wrap the #include openssl/engine.h with

Re: openssl 0.9.7d as an security risk

2004-10-15 Thread Ives Steglich
Ives Steglich wrote: Mosteika, Paul Edward (OpenVMS Engineering) wrote: Hi, I just tripped across this same problem yesterday. Which modules is it? I'd like to fix this for OpenVMS. Date: 2004-Mar-24 00:57:23 (UTC) Comment: Make S/MIME encrypt work again.

Darwin case-insensitive patch

2004-10-15 Thread Joseph Bruni
Hello, Here is a patch for Makefile.org that prevents the overwriting of man pages with symlinks due to Darwin's case insensitive file system. Joe --- Makefile.org.bakThu Oct 14 10:27:19 2004 +++ Makefile.orgThu Oct 14 10:27:51 2004 @@ -845,7 +845,7 @@ @pod2man=`cd util;

build ssl dll

2004-10-15 Thread Liying Ai
I am new to openssl. My application is written in bcb++ and runs as windows server on windows XP. The two dlls I downloaded doesn't work well with indy 9. Can anybody tell me the steps how to build by myself?. Thanks, Liying__Do You Yahoo!?Tired of

RE: build ssl dll

2004-10-15 Thread Mosteika, Paul Edward (OpenVMS Engineering)
Title: Message Hi, Goto the Sources http://www.openssl.org/source/, pull down the kit, expand it and look at : INSTALL.W32 Paul -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Liying AiSent: Friday, October 15, 2004 4:36 PMTo: