[openssl.org #2234] PATCH to fix broken c_rehash's $openssl derivation

2010-04-14 Thread Matthias Andree via RT
Greetings, I have identified several problems in the way OpenSSL 1.0.0's c_rehash works. This breaks on any nonstandard configuration, in that: - c_rehash POSTFIXES $dir/bin to the PATH, when it should prefix it. ($dir inherits $openssldir from Configure) - c_rehash should use $prefix/bin, not

STORE question

2010-04-14 Thread Valery Blazhnov
Where can I get program example using ENGINE as STORE? Valery Blazhnov __ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated

RE: OpenSSL 1.0.0a-dev on VMS

2010-04-14 Thread Arpadffy Zoltan
Hello, I have checked both the 1.0.0 and 0.9.8 20100414 snapshots and it look much-much better. Thank you very much Richard and Steven. I got almost clean compile in both branches On OPENSSL-098-STABLE-SNAP-20100414 got the following informational message and a warning. bss_dgram.c

Re: [openssl.org #2233] [BUG] Checkin #19560 causes an DTLS bug

2010-04-14 Thread Robin Seggelmann via RT
In my opinion the patch is also not necessary, because dtls1_buffer_message() requires a pointer to some 64 bit data to be used as the priority for the queue. However, s-s3-rrec.seq_num already is a pointer, since it is an array. Using (s-s3-rrec.seq_num) usually returns the same value, i.e.

[openssl.org #2230] [PATCH] DTLS reassembly

2010-04-14 Thread Stephen Henson via RT
This patch appears to be broken on OpenSSL 0.9.8 it gives warnings: d1_both.c: In function ‘dtls1_reassemble_fragment’: d1_both.c:623: error: passing argument 2 of ‘pqueue_find’ makes integer from pointer without a cast ../include/openssl/pqueue.h:89: note: expected ‘long unsigned int’ but

Re: [openssl.org #2230] [PATCH] DTLS reassembly

2010-04-14 Thread Robin Seggelmann via RT
On Apr 14, 2010, at 2:20 PM, Stephen Henson via RT wrote: This patch appears to be broken on OpenSSL 0.9.8 it gives warnings: d1_both.c: In function ‘dtls1_reassemble_fragment’: d1_both.c:623: error: passing argument 2 of ‘pqueue_find’ makes integer from pointer without a cast

[openssl.org #2233] [BUG] Checkin #19560 causes an DTLS bug

2010-04-14 Thread Stephen Henson via RT
[seggelm...@fh-muenster.de - Wed Apr 14 12:08:30 2010]: In my opinion the patch is also not necessary, because dtls1_buffer_message() requires a pointer to some 64 bit data to be used as the priority for the queue. However, s-s3-rrec.seq_num already is a pointer, since it is an

Re: question regarding crypto\bio\bio_lib.c and num_read

2010-04-14 Thread Modem Man
I think, it could be a bug, not yet noted by others because never used num_read. Regards, M.M. Ray Satiro schrieb: Both BIO_write() and BIO_puts() increment num_write on success. But BIO_gets() by all appearances does not increment num_read, only BIO_read() does. I don't see why that omission

Re: [openssl.org #2233] [BUG] Checkin #19560 causes an DTLS bug

2010-04-14 Thread Robin Seggelmann via RT
On 14.04.2010, at 15:35, Stephen Henson via RT wrote: [seggelm...@fh-muenster.de - Wed Apr 14 12:08:30 2010]: In my opinion the patch is also not necessary, because dtls1_buffer_message() requires a pointer to some 64 bit data to be used as the priority for the queue. However,

[openssl.org #2233] [BUG] Checkin #19560 causes an DTLS bug

2010-04-14 Thread Stephen Henson via RT
[seggelm...@fh-muenster.de - Wed Apr 14 18:03:15 2010]: Yes, but the dtls1_buffer_message() function uses a PQ_64BIT pointer to pass a PQ_64BIT struct, which is accessed directly. However, passed is just the pointer to the array which holds the sequence number. This is not very

[openssl.org #2235] Resolved: Minor fix to crypto/ts/Makefile

2010-04-14 Thread Stephen Henson via RT
According to our records, your request has been resolved. If you have any further questions or concerns, please respond to this message. __ OpenSSL Project http://www.openssl.org Development Mailing

Re: OpenSSL 1.0.0a-dev on VMS

2010-04-14 Thread Steven M. Schweda
-SNAP-20100414.ALPHA.CRYPTO]OPENSSLCONF.H; as input -RMS-E-DNF, directory not found -SYSTEM-W-NOSUCHFILE, no such file [...] (Oh, _now_ I see. This (annoying) change would allow the deletion of a few lines of DCL in [.crypto]install.com. But they weren't deleted.) --- crypto/install.com_orig

Re: OpenSSL 1.0.0a-dev on VMS (v. HP-UX ia64)

2010-04-14 Thread Steven M. Schweda
If there are any minor issues which someone VMS illiterate (i.e. me) can understand I'll fix them. By the way, speaking of non-VMS stuff, in case anyone cares, ... dyi # uname -a HP-UX dyi B.11.31 U ia64 4235313755 unlimited-user license dyi # gcc --version gcc (GCC) 4.3.3 [...] [...] gcc

Information wanted on OpenSSL cipher alias HIGH, MEDIUM and LOW.

2010-04-14 Thread Bhat, Jayalakshmi Manjunath
Hi All, I wanted to know when we use ALL:!SSLv2:!EXPORT:!LOW:!MEDIUM:!DH to select the ciphers how do OpenSSL understands what are ciphers are available under LOW and MEDIUM. Ssleay.txt documents names LOW,MEDIUM and HIGH as aliases. Please can someone provide me more information on this? Thanks

PEM reads entire file before failing

2010-04-14 Thread Phillip Hellewell
I've noticed when calling PEM_read_bio_X509() on a bogus file it has to read *the entire file* before it fails and returns NULL, whereas other functions like d2i_PKCS7_bio and d2i_PKCS12_bio() fail after reading just a small amount. Can we fix the PEM functions to fail sooner? Why can't they