[openssl.org #1291] [PATCH] Remove old libdes support?

Hi, Various places in the source say that old des support is going to be removed before 1.0. I think it's time to move forward. I think we have 2 options: - Completly drop the old des support, including des_old.h - Drop the libdes compatibility, so that it's only compatible with older

ECX extensions.

I looked a bit in detail into the ecpoint format extension stuff. - Currently, as I said yesterday, one cannot compile openssl with OPENSSL_NO_EC. - I am not sure but it seems to me that the tlsext_ecpointformat_list in the SSL is not freed together with an SSL object, so you have a mem

Re: .NET wrapper for OpenSSL

I have a sourceforge project pending for creation.On 3/13/06, Kyle Hamilton [EMAIL PROTECTED] wrote: This would be a good thing to have available.I don't believe itshould be in the core OpenSSL code, though, but it could be in contrib/ -- I would suggest making it available as a separate projecton

[openssl.org #1292] SSL_add_dir_cert_subjects_to_stack does not check for read access of file, breaking TLS enabled LDAP clients

Hi, initial report at: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=185080 Imho it's more a OpenSSL than a OpenLDAP client problem. Regards, Peter Description of problem: During tracking down, why a LDAP enabled postfix cannot lookup via TLS enabled LDAP client I found that

Re: [openssl.org #1292] SSL_add_dir_cert_subjects_to_stack does not check for read access of file, breaking TLS enabled LDAP clients

[EMAIL PROTECTED] via RT wrote: Hi, initial report at: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=185080 Imho it's more a OpenSSL than a OpenLDAP client problem. The use of TLS_CACERTDIR / TLSCACertificatePath is discouraged in all of the OpenLDAP documentation. See