Re: problem with creating cert with openssl x509

2009-11-12 Thread Tomas Hoger
On Wed, 11 Nov 2009 09:01:41 -0800 (PST) Al shase...@yahoo.com wrote: is the date format correct then? the x509 doesnt seem to give me the exact format for datesetting and i used YYMMDDHHMMSSZ. I tried other formats but all no good. How did you set yours? man 1 x509 -startdate

Re: Test of disabled renegotiation in 0.9.8l

2009-11-12 Thread Boyle Owen
Probably not intended, at least behavior of current 0.9.8-stable CVS is different now. See my mail with quite similar question: http://marc.info/?l=openssl-devm=125792743829558w=2 Thanks Tomas, interesting post... I have tested various builds against the client renegotiation vulnerability

[openssl.org #2095] Fix for bug 2095

2009-11-12 Thread Bernhard Rosenkränzer via RT
Here's a fix for bug 2095: --- openssl-1.0.0-beta4/crypto/sha/asm/sha1-x86_64.pl.ark 2009-11-12 11:49:14.050385007 + +++ openssl-1.0.0-beta4/crypto/sha/asm/sha1-x86_64.pl 2009-11-12 11:57:00.589494831 + @@ -150,7 +150,7 @@ ___ sub BODY_20_39 { my ($i,$a,$b,$c,$d,$e,$f)=...@_;

Re: Renegotiation behavior in 0.9.8l

2009-11-12 Thread Tomas Hoger
Hi Steve! On Wed, 11 Nov 2009 16:08:36 +0100 Dr. Stephen Henson st...@openssl.org wrote: On Wed, Nov 11, 2009, Tomas Hoger wrote: This is unclear, they are banned in 0.9.8-stable, but 1.0.0beta4 seems to allow all, even those without an extension. Sorry about that, the port I did to

Re: Test of disabled renegotiation in 0.9.8l

2009-11-12 Thread Lutz Jaenicke
Boyle Owen wrote: PPS: Although I have subscribed to this list, I am not getting the mails (I have to keep checking the archives). Is there anyone who can check out my account? Hmm. If memory serves me right there was a subscribe message sent to the list instead of the mailing list

Re: OpenSSL 1.0.0 beta4 release

2009-11-12 Thread Richard Levitte
I just committed the suggested changes. I try to find the time checking the problems with the tests within the next few days. Cheers, Richard In message 0915433492_20202...@antinode.info on Wed, 11 Nov 2009 15:43:34 -0600 (CST), Steven M. Schweda s...@antinode.info said: sms From:

RE: OpenSSL 1.0.0 beta4 release

2009-11-12 Thread Arpadffy Zoltan
Hello, I have already made the correction off all remaining issues... 32/64 bit pointer size handling. I still have some minor issues around tests.com... but in about an hour I will be able to submit a patch. Regards, Z -Original Message- From: Richard Levitte

Re: [openssl.org #2088] [BUG] [PATCH] memory leak in d2i_PublicKey

2009-11-12 Thread Aleksey Samsonov via RT
==by 0x4026A4: d2i_PublicKey ==22183==by 0x401A90: main ==22183== ==22183== LEAK SUMMARY: ==22183==definitely lost: 168 bytes in 1 blocks openssl-1.0.0-stable-SNAP-20091112 (OpenSSL 1.0.0-beta4 10 Nov 2009) : Return 0, and memory leak: ==31472== 296 (168 direct, 128 indirect) bytes in 1 blocks

openSSL 1.0.0 beta 4 on win32+Borland

2009-11-12 Thread J Staniforth
Hello all, OpenSSL 1.0.0 beta 4 fails to compile on Borland (C++ Builder 2006) due to some missing definitions in e_os.h. The patch below fixes the problem with no apparent side-effects. It appears to be no longer possible to use assembler code with Borland as the linker fails when reading NASM

Re: OpenSSL 1.0.0 beta4 release

2009-11-12 Thread Richard Levitte
In message 09111210562552_20202...@antinode.info on Thu, 12 Nov 2009 10:56:25 -0600 (CST), Steven M. Schweda s...@antinode.info said: sms From: Dr. Stephen Henson st...@openssl.org sms sms Can you (and others in this thread) please submit bug fix patches to the sms request tracker

Re: OpenSSL 1.0.0 beta4 release

2009-11-12 Thread Richard Levitte
In message 839c820b5c926b4b89713b3a6ed68d2aae5...@sgstmail.scigames.at on Thu, 12 Nov 2009 16:26:57 +0100, Arpadffy Zoltan zoltan.arpad...@scientificgames.se said: Zoltan.Arpadffy The only extra improvement is that I used the unused Zoltan.Arpadffy second variable to configure the pointer size

Re: OpenSSL 1.0.0 beta4 release

2009-11-12 Thread Steven M. Schweda
From: Richard Levitte rich...@levitte.org smsAdded an SSL_ prefix to the object library names so that a sms victim might have some chance of identifying the things amid the sms clutter in SYS$SHARE: Most victims have read some documentation and therefore know what the library names

Re: OpenSSL 1.0.0 beta4 release

2009-11-12 Thread joshi chandran
Hi ALL , I tried to build openssl-1.0.0-beta4 version of Openssl for AIX . I am getting error while building . I have followed the following step. 1. ./Configure -DSSL_ALLOW_ADH --prefix=/usr --openssldir=/var/ssl no-idea no-rc5 no-ec no-symlinks shared threads aix-cc Configuring for