Re: [openssl.org #1292] SSL_add_dir_cert_subjects_to_stack does not check for read access of file, breaking TLS enabled LDAP clients

[EMAIL PROTECTED] via RT wrote: Hi, initial report at: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=185080 Imho it's more a OpenSSL than a OpenLDAP client problem. The use of TLS_CACERTDIR / TLSCACertificatePath is discouraged in all of the OpenLDAP documentation. See slapd.conf

[openssl.org #1292] SSL_add_dir_cert_subjects_to_stack does not check for read access of file, breaking TLS enabled LDAP clients

Hi, initial report at: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=185080 Imho it's more a OpenSSL than a OpenLDAP client problem. Regards, Peter Description of problem: During tracking down, why a LDAP enabled postfix cannot lookup via TLS enabled LDAP client I found that ope

Re: .NET wrapper for OpenSSL

I have a sourceforge project pending for creation.On 3/13/06, Kyle Hamilton <[EMAIL PROTECTED]> wrote: This would be a good thing to have available.  I don't believe itshould be in the core OpenSSL code, though, but it could be in contrib/ -- I would suggest making it available as a separate projec

Re: .NET wrapper for OpenSSL

I hadn't considered #2. I suppose I could do both in one shot really. Good idea!On 3/13/06, Weijun Max Wang <[EMAIL PROTECTED] > wrote:FrankThis is a very interesting project. IMHO, there are 2 kinds of APIs we can provide:1. A OpenSSL-like one. Original users of OpenSSL may like it.2. Plugin as a

ECX extensions.

I looked a bit in detail into the ecpoint format extension stuff. - Currently, as I said yesterday, one cannot compile openssl with OPENSSL_NO_EC. - I am not sure but it seems to me that the tlsext_ecpointformat_list in the SSL is not freed together with an SSL object, so you have a mem leak

[openssl.org #1291] [PATCH] Remove old libdes support?

Hi, Various places in the source say that old des support is going to be removed before 1.0. I think it's time to move forward. I think we have 2 options: - Completly drop the old des support, including des_old.h - Drop the libdes compatibility, so that it's only compatible with older openssl

[openssl.org #1290] [PATCH] Convert destest.c to use DES_* functions.

Hi, The attached patch converts destest.c to use DES_* function instead of des_* functions. It's the only part of the source that is still using the old names. Kurt __ OpenSSL Project http://ww