[openssl.org #2870] OpenSSL 0.9.8o 01 Jun 2010 configuration file dir bug

2012-09-07 Thread . via RT
OpenSSL 0.9.8o 01 Jun 2010 In configuration file, [ CA_default ] dir = ~/demoCA This will cause problem loading the private key for CA(fopen cannot find file or directory but I can actually use more to view that file). Changing this to absolute path fixes this problem. Yang

[openssl.org #2871] bug report

2012-09-07 Thread Vitalijs Anisimovs via RT
Hello OpenSSL team! There is a bug in the session resume (server side, when SSL_OP_NO_TICKET option specified) code. This is hash function for session id: static unsigned long ssl_session_hash(const SSL_SESSION *a) { unsigned long l; l=(unsigned long) ((unsigned int) a-session_id[0] )|

[openssl.org #2872] Bug Report

2012-09-07 Thread Santhosh Krishnamurthy via RT
Hello there Good Morning I need to report a bug and also need a clarification on the same. My name is Santhosh working in Bangalore. I have downloaded your library for testing purpose and found two issue.Please confirm me whether its an issue Or the feature of the open ssl library itself.

[openssl.org #2873] [Bug] -noemailDN only affects Subject DN

2012-09-07 Thread Stefan H. Holek via RT
When the -noemailDN flag is used with the openssl ca command, the email address is only removed from the Subject DN, but not the Issuer DN. This leaves self-signed CA certs created with this flag unverifiable, because the DNs do not match. -- Stefan H. Holek ste...@epy.co.at

Re: [openssl.org #2836] [PATCH] Staple the correct OCSP Response when multiple certs are configured

2012-09-07 Thread Rob Stradling via RT
Attached is an updated patch for CVS HEAD, plus a patch for the 1.0.2 branch. Are you still accepting patches for 1.0.1? Any chance of reviewing these patches soon? Thanks. On 19/06/12 21:15, Rob Stradling via RT wrote: The OCSP Stapling Callback function (s-ctx-tlsext_status_cb) is called

Re: FIPS validation process

2012-09-07 Thread Steve Marquess
On 09/07/2012 03:14 AM, V.Ravikumar wrote: Hello All, I would be so thankful if somebody explains the application fips validation process in details. Also need purpose of below files and how they will be used in validation process. fipscanister.o fipscanister.o.sha1 fips_premain.c:

FIPS_mode_set(1) always returns false

2012-09-07 Thread Taraniteja Vishwanatha
Hey guys, I have built openssl-FIPS module (1.2.4) for iOS as per the instructions in the user guide 1.2. I have included the headers and libraries in my test app. I call FIPS_mode_set(1) in the app and it always returns false. Is it because 1.2.4 module supports iOS 5.0 and I am using iOS 5.1?

MIPS linux support patch

2012-09-07 Thread Brad House
This patchset is against OpenSSL 1.0.1c. It does 2 things very minor things. First, it adds a linux-mipsel target to Configure. Second, it fixes the MIPS perlasm, it appears as though at some point AES_set_encrypt_key and AES_set_decrypt_key in the ASM needed to be renamed to

[patch] fix Configure to allow --sysroot to be passed through to compiler

2012-09-07 Thread Brad House
It appears if you pass something like: ./Configure linux-mips --sysroot=/opt/uclibc because the Configure script doesn't expect compiler options to begin with 2 hyphens, it errors out. The attached patch against OpenSSL 1.0.1c fixes that. Thanks. -Brad diff -ruN openssl-1.0.1c.old/Configure

Re: MIPS linux support patch

2012-09-07 Thread Brad House
On 09/07/2012 11:55 AM, Brad House wrote: This patchset is against OpenSSL 1.0.1c. It does 2 things very minor things. First, it adds a linux-mipsel target to Configure. Second, it fixes the MIPS perlasm, it appears as though at some point AES_set_encrypt_key and AES_set_decrypt_key in the

RE: FIPS_mode_set(1) always returns false

2012-09-07 Thread Ken Montagna
Shouldn't you be using FIPS 2.0 object module with openssl 1.01c ? That is what I am using From: owner-openssl-...@openssl.org [mailto:owner-openssl-...@openssl.org] On Behalf Of Taraniteja Vishwanatha Sent: Friday, September 07, 2012 7:21 AM To: openssl-dev@openssl.org Subject:

Re: FIPS_mode_set(1) always returns false

2012-09-07 Thread Taraniteja Vishwanatha
I did not see any build instructions in http://openssl.org/docs/fips/UserGuide-2.0.pdf to build the FIPS module for iOS. The instructions are given only in 1.2 User guide. http://openssl.org/docs/fips/UserGuide-1.2.pdf This is what I am confused about. How did you build the FIPS2.0 module for

Re: FIPS_mode_set(1) always returns false

2012-09-07 Thread Steve Marquess
On 09/07/2012 01:32 PM, Taraniteja Vishwanatha wrote: I did not see any build instructions in http://openssl.org/docs/fips/UserGuide-2.0.pdf These queries would more appropriately directed to the openssl-users list. Check the latest draft of the User Guide that hasn't been posted to

Re: FIPS_mode_set(1) always returns false

2012-09-07 Thread Taraniteja Vishwanatha
Thanks Steve. Appreciate it. I will build 2.0 Module for iOS 5.1. On Fri, Sep 7, 2012 at 1:57 PM, Steve Marquess marqu...@opensslfoundation.com wrote: On 09/07/2012 01:32 PM, Taraniteja Vishwanatha wrote: I did not see any build instructions in