Null pointer dereference in crypto/dsa/dsa_asn1.c

2009-12-11 Thread Michael Cook
In this code (dsa_asn1.c): 71 static int sig_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it) 72 { 73 if(operation == ASN1_OP_NEW_PRE) { 74 DSA_SIG *sig; 75 sig = OPENSSL_malloc(sizeof(DSA_SIG)); 76 si

Re: [openssl.org #2105] Please reconsider the client side of the CVE-2009-3555 fix in 1.0.0

2009-12-11 Thread Tomas Mraz via RT
On Fri, 2009-12-11 at 14:14 +0100, Stephen Henson via RT wrote: > The problem of adding fields to SSL_CTX and SSL has been mentioned by a > number of people before. How bad is that in practice? SSL_CTX and SSL > structures are both allocated dynamically so the size change wont > matter. The only r

[openssl.org #2105] Please reconsider the client side of the CVE-2009-3555 fix in 1.0.0

2009-12-11 Thread Stephen Henson via RT
> [tm...@redhat.com - Wed Nov 18 09:58:08 2009]: > > The TLS client in openssl-1.0.0 branch aborts the connection if > SSL_OP_ALLOW_UNSAFE_RENEGOTIATION (or SSL_OP_ALL) flag is not set by the > calling application and the connected server does not return the > extension in the server hello message

cryptoki (Cryptographic Token Interface) patch for OpenSSL 0.9.8k

2009-12-11 Thread Samuel123smith
Hi ALL, I am new to OpenSSL. I am trying to support cryptoki support for OpenSSL. I have gone through the Source code of OpenSSL 0.9.8k and have found that it does not have pkcs11 support . Any one can please direct me to the pkcs11 patch for openssl 0.9.8k? Thanks in advance Samuel

Re: [CVS] OpenSSL: openssl/doc/ssl/ SSL_CTX_set_options.pod

2009-12-11 Thread Rainer Jung
On 09.12.2009 19:16, Dr. Stephen Henson wrote: OpenSSL CVS Repository http://cvs.openssl.org/ Server: cvs.openssl.org Name: Dr. Stephen Henson Root: /v/openssl/cvs E