Re: VIA Padlock Hashing Engine [Was: Fix VIA Padlock RNG support ?]

2008-09-12 Thread Andy Polyakov
BTW, my memory is vague here, is this Padlock block only able to do one-shot hashing? Yes, but a technique bypassing this limitation was proposed and proven to work (as per end of SHA1 thread mentioned earlier). Technique involved crashing of hashing instruction into non-accessible page. And

Re: Fix VIA Padlock RNG support ?

2008-09-12 Thread Andy Polyakov
I don't think there's any taboo or a strong opposition against the patch. It's just that Andy hasn't followed up, I sort of given up and moved to other projects and the whole thing has gone forgotten. Ok. I hope after my re-merge and testing we can get it integrated this time. BTW, my memory is

Re: [openssl.org #1741] failed in testing BN_sqr openssl in aix 5.2 of 64 bit mode

2008-09-12 Thread Andy Polyakov via RT
I am having problem to pass test, BN_sqr in AIX 5.2 for version openssl-0.9.7g. ... test BN_sqr Square test failed! This is in FAQ, 11. Why does the OpenSSL test suite fail in BN_sqr test [on a 64-bit platform]? 64-bit AIX is *not* supported by 0.9.7, use 0.9.8* instead. It is

[openssl.org #1743] crasher due to lack of threadsafety on names_lh

2008-09-12 Thread John Wilkinson via RT
diff -ru openssl-0.9.8h/crypto/cryptlib.c openssl-0.9.8h-patched/crypto/cryptlib.c --- openssl-0.9.8h/crypto/cryptlib.c2007-09-06 12:43:46.0 + +++ openssl-0.9.8h-patched/crypto/cryptlib.c2008-09-11 18:21:33.0 + @@ -166,7 +166,8 @@ ec_pre_comp,

RE: [openssl.org #1741] failed in testing BN_sqr openssl in aix 5.2 of 64 bit mode

2008-09-12 Thread Jack Rong via RT
Hi Andy, Thanks so much for the response. I am now using 0.9.8g and try to configure it with aix64-gcc, such as: ./config aix64-gcc --prefix=/usr/local/ssl64 --openssldir=/usr/local/ssl64 no-shared no-asm I got configure error: Operating system: 0002423F4C00-ibm-aix Configuring for aix-gcc

EVP_Cipher with Engine

2008-09-12 Thread Nanavati, Sitanshu
Hi all, I am trying to override the AES with my own algorithm in an engine. I have made the necessary initialized the EVP_CIPHER structure with my functions. However, while testing, I see that the EVP_EncryptFinal_ex() (and EVP_DecryptFinal_ex() )is required. But there is no hook provided

Re: [openssl.org #1741] failed in testing BN_sqr openssl in aix 5.2 of 64 bit mode

2008-09-12 Thread Peter Waltenberg
We did manage to get 0.9.7 building on AIX 64. The necessary patches will be on the request tracker (somewhere). Peter From: Andy Polyakov via RT [EMAIL PROTECTED]

Re: [openssl.org #1741] failed in testing BN_sqr openssl in aix 5.2 of 64 bit mode

2008-09-12 Thread Andy Polyakov via RT
Thanks so much for the response. I am now using 0.9.8g and try to configure it with aix64-gcc, such as: ./config aix64-gcc --prefix=/usr/local/ssl64 --openssldir=/usr/local/ssl64 no-shared no-asm I got configure error: When using config lines you're expected to call ./Configure, not

Re: [openssl.org #1741] failed in testing BN_sqr openssl in aix 5.2 of 64 bit mode

2008-09-12 Thread Andy Polyakov
We did manage to get 0.9.7 building on AIX 64. The necessary patches will be on the request tracker (somewhere). Relevant question is if we want to keep maintaining 0.9.7? The answer is no and therefore I didn't want to encourage user. Of course it's possible to get 0.9.7 building on AIX64,

Re: a question about CRL distribution points extension in a certificate.

2008-09-12 Thread Patrick Patterson
On September 12, 2008 12:35:10 am JeanYiYi wrote: Dear openssl guru: I am new in openssl. I have some questions regarding to 'CRL Distribution Points extension'. I did read the RFC. but I am still confused about some details. :-(. a) a certificate has a 'CRL Distribution Points extension'.

RE: [openssl.org #1741] failed in testing BN_sqr openssl in aix 5.2 of 64 bit mode

2008-09-12 Thread Jack Rong via RT
Hi Andy, It worked with the recent version using Configure script as you suggested. Thanks a lot! Jack -Original Message- From: Andy Polyakov via RT [mailto:[EMAIL PROTECTED] Sent: Friday, September 12, 2008 7:17 AM To: [EMAIL PROTECTED] Cc: openssl-dev@openssl.org Subject: Re:

Re: a question about CRL distribution points extension in a certificate.

2008-09-12 Thread JeanYiYi
Many many thanks for Patrick. Now, I am clear about this extension. Best Regards Jean Patrick Patterson-3 wrote: On September 12, 2008 12:35:10 am JeanYiYi wrote: Dear openssl guru: I am new in openssl. I have some questions regarding to 'CRL Distribution Points extension'. I did read

Re: [PATCH] openssl-0.9.8h in AIX 5.3 do not build shared libraries

2008-09-12 Thread Andy Polyakov
2) entry point And you could use -binitfini to specify routines, as IBM satys: Optional shared object initialization and termination routines can be specified when creating the shared object. And what I meant was that there should be some code that invokes the routines specified with

[openssl.org #1694] OpenSSL 0.9.8h bug: Configure has illegal -X 64, should be -X64

2008-09-12 Thread Andy Polyakov via RT
addressed in http://cvs.openssl.org/chngview?cn=17390 __ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager

OpenSSL Web Server Certificate renewed

2008-09-12 Thread Lutz Jaenicke
Hi! I have just installed a new (2048bit) certificate and key to the OpenSSL Project webserver. It is a wildcard certifcate for *.openssl.org catching both www.openssl.org and rt.openssl.org. Many thanks go to Steve Roylance from Globalsign for donating a 3 year wildcard SSL certificate!! Best