[openssl.org #2821] Bug in GOST89-MAC implementation

2012-05-21 Thread Dmitry Belyavsky via RT
Greetings! We have found a bug in GOST89-MAC implementation. In case when we calculate the mac for less then 8 bytes, we should provide zero-bytes padding to 16 bytes. In case of zero-length data, the MAC should be zero-bytes. The patches are attached, both for the engine and for the

Re: [openssl.org #2821] Bug in GOST89-MAC implementation

2012-05-21 Thread Dmitry Belyavsky
Greetings! Sorry, the second patch fixes the behaviour of GOST digest algorythm for zero-length data. Thank you! On Mon, May 21, 2012 at 12:37 PM, Dmitry Belyavsky via RT r...@openssl.org wrote: Greetings! We have found a bug in GOST89-MAC implementation. In case when we calculate the mac

Re: Cert order in .pem format

2012-05-21 Thread KThirumal
Hi Pete, I tried to load the .p12 certs to the code directly, but it got failed at SSL_CTX_use_PrivateKey_file 1. err = SSL_CTX_use_certificate_chain_file(ctx, KeyFile); 2. SSL_CTX_set_default_passwd_cb(ctx, passwd); 3. err = SSL_CTX_use_PrivateKey_file(ctx, KeyFile, SSL_FILETYPE_PEM); 4.

Fw: Question on enhancing OpenSSL logs

2012-05-21 Thread grajaprabhu
Hi Marek, Thanks for the snippet. Its working in dev. But however its failing in one of our test regions with a compilation error as below. Cannot assign extern C void(*)(ssl_st*,int,int) to extern C void(*)() at a line where we have SSL_CTX_set_info_callback(ctx, ssl_connection_info_cb); We

Re: SHA-256 implementation improvement

2012-05-21 Thread Pavel Semjanov
On 19.05.2012 19:04, Andy Polyakov wrote: I did observe more than 20% on Opteron, but on Core2/Sandy Bridge I get only 13-11%... Well, I've got 984 / 1170 clocks on Core 2 (17%) and 1033 / 1250 on Core i5 (Westmere) (18%) Out of curiosity, how fast is updated code from CVS on Westmere?

Re: [openssl.org #2817] OpenSSL 1.0.1c masm failure with Visual Studio 10 VC-WIN64A.

2012-05-21 Thread Noah Friedman via RT
With Visual Studio 10 x64, I get the following error at configure time: ... D:\build.ntx64vs10perl ms\uplink-x86_64.pl masm 1ms\uptable.asm D:\build.ntx64vs10ml64 -c -Foms\uptable.obj ms\uptable.asm Assembling: ms\uptable.asm ms\uptable.asm(356) : error

RE: Cert order in .pem format

2012-05-21 Thread Dave Thompson
From: owner-openssl-...@openssl.org On Behalf Of kthiru...@inautix.co.in Sent: Monday, 21 May, 2012 10:31 (-dev and owner- !! dropped) I tried to load the .p12 certs to the code directly, but it got failed at SSL_CTX_use_PrivateKey_file 1. err = SSL_CTX_use_certificate_chain_file(ctx,

RE: Error in openssl/rsa

2012-05-21 Thread Dave Thompson
From: owner-openssl-...@openssl.org On Behalf Of Senthil Balachandran Sent: Sunday, 20 May, 2012 10:57 Here is the simple program i am trying to do but unfortunately i got errors on decrypting side and the error is as shown below, so can anyone please fix the issue. Thanks in advance.

Failure during session resumption not indicated to SSL client

2012-05-21 Thread shivakumar
Hi All, When SSL server gets the client hello message(in the function ssl3_get_client_hello), if session ID is present in the client hello message, then the server will try to find if the session can be reused. Please find the related code {