Re: [openssl.org #2194] Unwanted dependencies to user32.dll

2010-03-18 Thread Andy Polyakov via RT
I agree that OPENSSL_isservice() cannot be changed, ??? My suggestion for *you* was to modify it to unconditionally return 1... but you can decide to log an event always. ... so that messages will be forced to event log. So all if (OPENSSL_isservice()) can be removed. Or change it to a

TLS and bad record mac

2010-03-18 Thread Gregory BELLIER
Hello, I added a cipher in OpenSSL and NSS. I would like to send an email with SMTPs from a modified Thunderbird (because of NSS) to a postfix. The TLS negociation is between NSS and OpenSSL. However, I get the following error: Mar 18 19:40:15 pico postfix/smtpd[3842]: SSL3 alert

Re: Windows support baseline [was: Unwanted dependencies to user32.dll]

2010-03-18 Thread Roumen Petrov
William A. Rowe Jr. wrote: On 3/16/2010 4:53 PM, Kees Dekker wrote: * I saw a lot of NT4 code. What NT4 code? You must be referring to _WIN32_WINNT macro sometimes set to 0x400. It does not denote NT4-specific code, it denotes that NT4 is required *minimum*. Meaning that it targets *all*

Re: [openssl.org #2195] [PATCH] Set default field separator in do_name_ex() (nameopt switch)

2010-03-18 Thread Roumen Petrov
Kaspar Brand via RT wrote: When using -nameopt with the x509/req/ca commands, OpenSSL will currently abort the output if no sep_xxx option is provided. Examining the certificate from https://rt.openssl.org with openssl 509 -noout -text -nameopt utf8 e.g. gives Certificate: Data:

Re: TLS and bad record mac

2010-03-18 Thread Tim Hudson
Gregory BELLIER wrote: I added a cipher in OpenSSL and NSS. I would like to send an email with SMTPs from a modified Thunderbird (because of NSS) to a postfix. The TLS negociation is between NSS and OpenSSL. [snip] Do you have any hint in what could be wrong? Use the -state -debug flags for

Re: [openssl.org #2195] [PATCH] Set default field separator in do_name_ex() (nameopt switch)

2010-03-18 Thread Roumen Petrov via RT
Kaspar Brand via RT wrote: When using -nameopt with the x509/req/ca commands, OpenSSL will currently abort the output if no sep_xxx option is provided. Examining the certificate from https://rt.openssl.org with openssl 509 -noout -text -nameopt utf8 e.g. gives Certificate: Data: