Re: RAND_screen() thread safety and RAND_poll() initialization

2009-07-23 Thread Goetz Babin-Ebell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Tanguy Fautré wrote: | Hi, | | Using OpenSSL 0.9.8j via LibCurl 7.19.5, we've discovered some random crashes and deadlocks that, | after further investigations, led us to a call to RAND_screen() from LibCurl. | | Two things puzzles me about the implem

[openssl.org #1995] Man pages for the "rsa" utility should clearly state what output formats are used

2009-07-23 Thread Aleksander Adamowski via RT
When reading the manual page of the RSA utility ("man rsa"), one cannot easily determine whether the output will be in PKCS#1 or PKCS#8 format and whether that format depends on other options. The only thing that is specified is the DER/PEM encoding of the output, which is not a format per se. It

[openssl.org #1994] [BUG REPORT] extra "$" caracter in test/Makefile -> make error on AIX

2009-07-23 Thread Gilles PION via RT
Context: Build and target system:powerpc-ibm-aix5.3.0.0 Openssl Version:openssl-0.9.8k using gnu make: gmake --version GNU Make 3.81 Copyright (C) 2006 Free Software Foundation, Inc. This is free software; see the source for copying conditions. There is NO w

[openssl.org #1993] [PATCH] DTLS Cookie Resumption bug

2009-07-23 Thread Robin Seggelmann via RT
In d1_clnt.c the variables s->d1->send_cookie and s->hit aren't reset when initiating a new renegotiation handshake. This is ok if a new session is created, that is everything will be reset anyway, but with an abbreviated handshake without a new session this causes the handshake to fail. A

RAND_screen() thread safety and RAND_poll() initialization

2009-07-23 Thread Tanguy Fautré
Hi, Using OpenSSL 0.9.8j via LibCurl 7.19.5, we've discovered some random crashes and deadlocks that, after further investigations, led us to a call to RAND_screen() from LibCurl. Two things puzzles me about the implementation of RAND_screen(), hinting that it could maybe be a thread safety i

Re: RAND_poll() and CreateToolhelp32Snapshot() stability

2009-07-23 Thread Ger Hobbelt
That's not how it works, unfortunately. The fact that I submitted it as an official RT ticket now will make it certainly pop up on some screens of the core developer team (my guess: Dr. Henson) When they find the patch is useful and fit for inclusion - and assuming they've got time for this unpaid

[openssl.org #1992] RAND_poll() and CreateToolhelp32Snapshot() stability (also for 1.0.0.b3)

2009-07-23 Thread Ger Hobbelt via RT
Bumped and fed to RT as this bugger doesn't seem to have a ticket # while the fix is available, and I just got an enquiry about this and whether did it make it into the latest. (Nope, it did not. Yet?) See also the dev@ mail trail at the subject line & time shown below for how it got to this. Thi

Re: RAND_poll() and CreateToolhelp32Snapshot() stability

2009-07-23 Thread Tan, Eng Ten
Is this patch getting checked in? I still don't see it in the cvs Regards Eng