Re: PEM_read_bio_X509:BIO_gets:unsupported method

2006-01-06 Thread Jean-Marc Desperrier
David Taylor wrote: I only just joined this list today to past this patch. So in one word : - for technical reasons, fd bio are preferable to file bio on Solaris - but as fd bio don't implement gets, they are not usable as a direct replacement for file bio - your attached patch implements

Re: PEM_read_bio_X509:BIO_gets:unsupported method

2006-01-06 Thread Per Hedeland
Jean-Marc Desperrier [EMAIL PROTECTED] wrote: David Taylor wrote: I only just joined this list today to past this patch. So in one word : - for technical reasons, fd bio are preferable to file bio on Solaris Actually there's another workaround possible for the Solaris problem: The description

[openssl.org #1265] openssl prime 2

2006-01-06 Thread via RT
openssl prime 2 = 2 is not prime __ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager

[openssl.org #1266] openssl prime 2

2006-01-06 Thread via RT
openssl prime 2 2 is not prime openssl version openssl-0.9.8a __ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List

Re: PEM_read_bio_X509:BIO_gets:unsupported method

2006-01-06 Thread Richard Salz
the limitation is that stdio can only use fds that are below 256 (due to the fd being kept in a char in the FILE struct, which can't be changed without breaking binary backwards compatibility). Amazing. I first came across this problem with INN over a decade ago. It's still an issue? Wow.

Re: PEM_read_bio_X509:BIO_gets:unsupported method

2006-01-06 Thread Per Hedeland
Richard Salz [EMAIL PROTECTED] wrote: [I wrote:] the limitation is that stdio can only use fds that are below 256 (due to the fd being kept in a char in the FILE struct, which can't be changed without breaking binary backwards compatibility). Amazing. I first came across this problem with

Re: PEM_read_bio_X509:BIO_gets:unsupported method

2006-01-06 Thread Richard Salz
Well, how *do* you fix it without breaking binary backwards compatibility? The layout of the FILE struct is embedded in all binaries using the stdio macros (e.g. getc()/putc()). I don't know, but I can't believe that within a decade that they couldn't have come up with something. A fixup

Re: PEM_read_bio_X509:BIO_gets:unsupported method

2006-01-06 Thread Jack Lloyd
On Fri, Jan 06, 2006 at 08:37:25PM +0100, Per Hedeland wrote: Wow. Sun should be embarassed. Well, how *do* you fix it without breaking binary backwards compatibility? The layout of the FILE struct is embedded in all binaries using the stdio macros (e.g. getc()/putc()). Introducing

RE: [openssl.org #1266] openssl prime 2

2006-01-06 Thread David Schwartz
openssl prime 2 2 is not prime openssl version openssl-0.9.8a This is a known issue. The prime testing code was designed to test large primes. DS __ OpenSSL Project

Re: PEM_read_bio_X509:BIO_gets:unsupported method

2006-01-06 Thread Doug Royer
FYI: Its not a bug. It is a backward binary compatibly issue. In the BSD and older SVR days, the file descriptor in the FILE struct is a 'char', not an 'int'. So in order to still run the same older binary files, the size of the FILE struct can not change. Old time UNIX's know that this has been

Re: [openssl.org #1266] openssl prime 2

2006-01-06 Thread Damien Miller
David Schwartz wrote: openssl prime 2 2 is not prime openssl version openssl-0.9.8a This is a known issue. The prime testing code was designed to test large primes. rubbish, it is a simple overeager optimisation. Attached is a fix. -d Index: lib/libssl/src/crypto/bn/bn_prime.c

[openssl.org #1204] bug report - 0.9.8 and bad record mac because of wrong SSL_OP_TLS_BLOCK_PADDING_BUG handling

2006-01-06 Thread via RT
For Subversion, which goes through apache, I found that one workaround is to disable all SSLv3 ciphers except RC4. My apache config now has: SSLCipherSuite SSLv2:-LOW:-EXPORT:RC4+RSA and subversion appears to work again. __