RE: [openssl.org #1834] PKCS7_verify return value -1?

2009-01-30 Thread David Schwartz
> Hi, > > The documentation for PKCS7_verify says: > >PKCS7_verify() returns 1 for a successful verification and > zero or a >negative value if an error occurs. This is correct. > And in apps/smime.c there is this code: > > if (PKCS7_verify(p7, other, store,

[openssl.org #1834] PKCS7_verify return value -1?

2009-01-30 Thread Kurt Roeckx via RT
Hi, The documentation for PKCS7_verify says: PKCS7_verify() returns 1 for a successful verification and zero or a negative value if an error occurs. And in apps/smime.c there is this code: if (PKCS7_verify(p7, other, store, indata, out, flags))

[openssl.org #1833] [PATCH] Abbreviated Renegotiations

2009-01-30 Thread Robin Seggelmann via RT
Whenever a handshake is initiated, the variable s->new_session is set to indicate that a handshake is being performed. This is not the correct context because a handshake can also be abbreviated and will not create a new session then. This variable is also used in the right context to deter

Cannot compile OpenSSL with Borland C++ builder 6

2009-01-30 Thread Ruslan V
I try to get libeay32.lib ssleay32.lib for static linking. INSTALL.W32 has next steps for Borland C++ builder 5: * Configure for building with Borland Builder: > perl Configure BC-32 * Create the appropriate makefile > ms\do_nasm * Build > make -f ms\bcb.mak I use openssl-0.9.8j ;

[openssl.org #1832] PATCH: force IPv4/IPv6 for s_client

2009-01-30 Thread (Damien Miller) via RT
Hi, This diff changes the s_client and s_server apps to use getaddrinfo for address parsing rather than manual IPv4 parsing and gethostbyname. This allows specification of port by name: openssl s_client -connect bugzilla.mindrot.org:https But the main point is to support IPv6. You can now speci

[openssl.org #1831] PATCH: openssl rand -hex

2009-01-30 Thread (Damien Miller) via RT
Hi, This patch adds a -hex option to the rand app. E.g. $ openssl rand -hex 8 d203552d5eb39e76 Patch is from Matthieu Herrb (matth...@openbsd.org) via OpenBSD CVS. -d Index: apps/rand.c === RCS file: /cvs/src/lib/libssl/src/apps/r