[openssl.org #1830] [PATCH] TLS Key Material Extractor

Updated version for compatibility with 1.0.0beta1: --- ssl/ssl.h 2008-12-27 03:09:23.0 +0100 +++ ssl/ssl.h 2009-04-16 10:14:12.0 +0200 @@ -1770,6 +1770,10 @@ /* Pre-shared secret session resumption functions */ int SSL_set_session_secret_cb(SSL *s, tls_session_secret_cb_f

[openssl.org #1833] [PATCH] Abbreviated Renegotiations

Updated version for compatibility with 1.0.0beta1: --- ssl/d1_clnt.c 2008-06-02 00:33:24.0 +0200 +++ ssl/d1_clnt.c 2009-04-16 09:41:59.0 +0200 @@ -169,7 +169,7 @@ switch(s->state) { case SSL_ST_RENEGOTIATE: -

Null-ciphers and RFC 4785

Hello, Mazal-tov for getting Beta out. I am interested in the implementation of the null-ciphers (when the encryption is mandatory, and clear-text used). This is part of RFC 4785, which I didn't see in the log changes of openssl 1.0 beta. Any plans for 1.0? If you have any information on this, I

[openssl.org #1900] FreeBSD compile problem with _XOPEN_SOURCE defined

In ssl/kssl.c the constant _XOPEN_SOURCE is defined which results in using an old POSIX version and compilation problems on recent FreeBSD systems when adding SCTP support (necessary for SCTP-aware DTLS). With _XOPEN_SOURCE defined to 500, in sys/cdefs.h the constant _POSIX_C_SOURCE will get

[openssl.org #1900] FreeBSD compile problem with _XOPEN_SOURCE defined

The corresponding patch for 0.9.8 and 1.0.0: --- ssl/kssl.c 2009-02-14 22:49:38.0 +0100 +++ ssl/kssl.c 2009-04-16 13:30:18.0 +0200 @@ -68,7 +68,7 @@ #include -#define _XOPEN_SOURCE 500 /* glibc2 needs this to declare strptime() */ +#define _XOPEN_SOURCE 600 /* glibc2 needs

[openssl.org #1901] [patch] c_rehash fails to find openssl(1)

Hello, the c_rehash script produced from openssl/tools/c_rehash.in rev. 1.11 fails to execute the openssl binary if the environment variable OPENSSL does not contain the absolute pathname to the binary and the current working directory does not contain it as well. I guess this is just a small typ

Re: Null-ciphers and RFC 4785

On Thu, Apr 16, 2009, Ouaknine, Keren wrote: > Hello, > > Mazal-tov for getting Beta out. I am interested in the implementation of the > null-ciphers (when the encryption is mandatory, and clear-text used). This is > part of RFC 4785, which I didn't see in the log changes of openssl 1.0 beta. >

Re: [openssl.org #1901] AutoReply: [patch] c_rehash fails to find openssl(1)

> I guess this is just a small typo because a search for the binary is > done (lines 29--41) but the result is not used. The attached patch > fixes the problem. ...and here's the patch I forgot to attach... -- This email fills a much-needed gap in the archives. --- tools/c_rehash.in.orig

[openssl.org #1900] FreeBSD compile problem with _XOPEN_SOURCE defined

I just had another look at the code in ssl/kssl.c and didn't find any use of strptime(). The header file time.h doesn't need to be included at all, because there is nothing (left) requiring it. So the code should be removed. --- ssl/kssl.c 2009-02-14 22:49:38.0 +0100 +++ ssl/kssl.c

[openssl.org #1901] [patch] c_rehash fails to find openssl(1)

I'm not sure about this. Surely if the openssl utility is found on the PATH it should be able to execute it without having to include its absolute pathname? __ OpenSSL Project http://www.openssl.org

Re: [openssl.org #1901] [patch] c_rehash fails to find openssl(1)

Stephen Henson via RT wrote: > I'm not sure about this. Surely if the openssl utility is found on the > PATH it should be able to execute it without having to include its > absolute pathname? Sure, but the problem is the way c_rehash checks whether $openssl is executable or not in the `if (-d $dir