PEM reads entire file before failing

2010-04-14 Thread Phillip Hellewell
I've noticed when calling PEM_read_bio_X509() on a bogus file it has to read *the entire file* before it fails and returns NULL, whereas other functions like d2i_PKCS7_bio and d2i_PKCS12_bio() fail after reading just a small amount. Can we fix the PEM functions to fail sooner? Why can't they tell

Information wanted on OpenSSL cipher alias HIGH, MEDIUM and LOW.

2010-04-14 Thread Bhat, Jayalakshmi Manjunath
Hi All, I wanted to know when we use "ALL:!SSLv2:!EXPORT:!LOW:!MEDIUM:!DH" to select the ciphers how do OpenSSL understands what are ciphers are available under LOW and MEDIUM. Ssleay.txt documents names LOW,MEDIUM and HIGH as aliases. Please can someone provide me more information on this? Thank

Re: OpenSSL 1.0.0a-dev on VMS (v. HP-UX ia64)

2010-04-14 Thread Steven M. Schweda
> If there are any minor issues which someone VMS illiterate (i.e. me) can > understand I'll fix them. By the way, speaking of non-VMS stuff, in case anyone cares, ... dyi # uname -a HP-UX dyi B.11.31 U ia64 4235313755 unlimited-user license dyi # gcc --version gcc (GCC) 4.3.3 [...] [...] gc

Re: OpenSSL 1.0.0a-dev on VMS

2010-04-14 Thread Steven M. Schweda
t that using the old, sequestered [] tree made sense, and had the advantage of making clean-up simpler. This change, by the way is what hosed the installation procedure ([.crypto]install.com), which wasn't notified of the change: [...] Installing CRYPTO files. [...] %COPY-E-OPENIN,

[openssl.org #2235] Resolved: Minor fix to crypto/ts/Makefile

2010-04-14 Thread Stephen Henson via RT
According to our records, your request has been resolved. If you have any further questions or concerns, please respond to this message. __ OpenSSL Project http://www.openssl.org Development Mailing

[openssl.org #2233] [BUG] Checkin #19560 causes an DTLS bug

2010-04-14 Thread Stephen Henson via RT
> [seggelm...@fh-muenster.de - Wed Apr 14 18:03:15 2010]: > > Yes, but the dtls1_buffer_message() function uses a PQ_64BIT pointer >to pass a PQ_64BIT struct, which is accessed directly. However, >passed is just the pointer to the array which holds the sequence >number. This is not ver

Re: [openssl.org #2233] [BUG] Checkin #19560 causes an DTLS bug

2010-04-14 Thread Robin Seggelmann via RT
On 14.04.2010, at 15:35, Stephen Henson via RT wrote: >> [seggelm...@fh-muenster.de - Wed Apr 14 12:08:30 2010]: >> >> In my opinion the patch is also not necessary, because >> dtls1_buffer_message() requires a pointer to some 64 bit data to be >> used as the priority for the queue. However,

Re: question regarding crypto\bio\bio_lib.c and num_read

2010-04-14 Thread Modem Man
I think, it could be a bug, not yet noted by others because never used num_read. Regards, M.M. Ray Satiro schrieb: > Both BIO_write() and BIO_puts() increment num_write on success. But > BIO_gets() by all appearances does not increment num_read, only > BIO_read() does. I don't see why that omissio

[openssl.org #2233] [BUG] Checkin #19560 causes an DTLS bug

2010-04-14 Thread Stephen Henson via RT
> [seggelm...@fh-muenster.de - Wed Apr 14 12:08:30 2010]: > > In my opinion the patch is also not necessary, because >dtls1_buffer_message() requires a pointer to some 64 bit data to be >used as the priority for the queue. However, s->s3->rrec.seq_num >already is a pointer, since it is

Re: [openssl.org #2230] [PATCH] DTLS reassembly

2010-04-14 Thread Robin Seggelmann via RT
On Apr 14, 2010, at 2:20 PM, Stephen Henson via RT wrote: > This patch appears to be broken on OpenSSL 0.9.8 it gives warnings: > > d1_both.c: In function ‘dtls1_reassemble_fragment’: > d1_both.c:623: error: passing argument 2 of ‘pqueue_find’ makes integer > from pointer without a cast > ../incl

[openssl.org #2230] [PATCH] DTLS reassembly

2010-04-14 Thread Stephen Henson via RT
This patch appears to be broken on OpenSSL 0.9.8 it gives warnings: d1_both.c: In function ‘dtls1_reassemble_fragment’: d1_both.c:623: error: passing argument 2 of ‘pqueue_find’ makes integer from pointer without a cast ../include/openssl/pqueue.h:89: note: expected ‘long unsigned int’ but argumen

Re: [openssl.org #2233] [BUG] Checkin #19560 causes an DTLS bug

2010-04-14 Thread Robin Seggelmann via RT
In my opinion the patch is also not necessary, because dtls1_buffer_message() requires a pointer to some 64 bit data to be used as the priority for the queue. However, s->s3->rrec.seq_num already is a pointer, since it is an array. Using &(s->s3->rrec.seq_num) usually returns the same value, i.e

RE: OpenSSL 1.0.0a-dev on VMS

2010-04-14 Thread Arpadffy Zoltan
Hello, I have checked both the 1.0.0 and 0.9.8 20100414 snapshots and it look much-much better. Thank you very much Richard and Steven. I got almost clean compile in both branches On OPENSSL-098-STABLE-SNAP-20100414 got the following informational message and a warning. bss_dgram.c

STORE question

2010-04-14 Thread Valery Blazhnov
Where can I get program example using ENGINE as STORE? Valery Blazhnov __ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated Lis

[openssl.org #2234] PATCH to fix broken c_rehash's $openssl derivation

2010-04-14 Thread Matthias Andree via RT
Greetings, I have identified several problems in the way OpenSSL 1.0.0's c_rehash works. This breaks on any nonstandard configuration, in that: - c_rehash POSTFIXES $dir/bin to the PATH, when it should prefix it. ($dir inherits $openssldir from Configure) - c_rehash should use $prefix/bin, not