Re: race condition in X509_NAME_dup

2006-11-30 Thread Nils Larsch
Beat Zimmermann wrote: Hi we have experienced a reproducible race condition when calling X509_NAME_dup which leads to corrupt asn1 data. Corresponding error messages were: ASN1_CHECK_TLEN: wrong tag ASN1_TEMPLATE_NOEXP_D2I: unexpected eoc Our usage pattern: 1) we create a new x509 name

Re: [CVS] OpenSSL: openssl/apps/ dgst.c enc.c s_client.c s_server.c openss...

2006-11-30 Thread Goetz Babin-Ebell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Nils Larsch schrieb: Moin Goetz, Moin Nils, Goetz Babin-Ebell wrote: .. Index: openssl/crypto/bio/bio.h $ cvs diff -u -r1.69 -r1.70 bio.h ---

RE: [openssl.org #1416] [PATCH] display UPN if in subjectAltName

2006-11-30 Thread David Holmes
This looks like a useful and valid modification. What are the odds of it becoming part of the official source? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Charlie Lenahan via RT Sent: Friday, October 20, 2006 7:24 AM Cc: openssl-dev@openssl.org

[openssl.org #1416] [PATCH] display UPN if in subjectAltName

2006-11-30 Thread Stephen Henson via RT
[EMAIL PROTECTED] - Fri Oct 20 16:23:50 2006]: With this patch, instead of the subjectAltName getting othername:unsupported it will be something like othername:UPN[EMAIL PROTECTED] Nice when working with ceritifcates from CAC cards. I like the general idea of displaying something