Re: adding a new NID

2009-06-05 Thread Dr. Stephen Henson
On Thu, Jun 04, 2009, Jan Pechanec wrote: > On Mon, 25 May 2009, rakesh aggarwal wrote: > > >  > > > > > > > >Hi, > >  > >i am new to openssl and trying to add support for CTR mode in AES. > >i dont know what i am doing is correct or not? > >I made some changes based on my understanding but i wan

Re: [openssl.org #1950] [PATCH] DTLS fragment retransmission bug

2009-06-05 Thread Robin Seggelmann via RT
I just found another timing bug... --- crypto/bio/bss_dgram.c 5 Jun 2009 08:35:54 - 1.7.2.13 +++ crypto/bio/bss_dgram.c 5 Jun 2009 14:00:26 - @@ -217,12 +217,19 @@ timeleft.tv_usec += 100; } + if (timeleft.

Re: Rehashing Directories

2009-06-05 Thread David Michael
2009/6/5 Victor B. Wagner : > I think you are missing something with this idea. > > OpenSSL now provides two X509_LOOKUP_METHODS - lookup_file and > lookup_hashed_dir. First one requires big multi-cert file with > concatenated PEM certificates - exactly as your OS provided, I suppose. > > Second re

Re: [openssl.org #1950] [PATCH] DTLS fragment retransmission bug

2009-06-05 Thread Robin Seggelmann via RT
Here is an updated version, the last didn't cover every variation of the handshake message flow because the CertificateVerify state is entered every time, not only when a CertificateVerify message is really expected. --- crypto/bio/bss_dgram.c 5 Jun 2009 08:35:54 - 1.7.2.13