Re: [openssl.org #3038] [PATCH]: Fix warning-level alert handling in 0.9.8

2013-08-07 Thread mancha
mancha1 hush.com via RT openssl.org> writes: > > Hello. > > OpenSSL 0.9.8y does not properly handle warning level > alerts in SSLv23 client method unlike OpensSSL 1.0.0+. > > For example, when OpenSSL 0.9.8 initiates a connection > using TLS-SNI extensions in "SSLv23 mode" and the server > re

[openssl.org #3107] Bug Report with Patch 1.0.1c/e (Typo in apps/ocsp.c line 1412)

2013-08-07 Thread Matthew J. Harmon via RT
Hello! Issue: Typo in apps/ocsp.c line 1412 Issue detail: "Error querying OCSP responsder" (stray "S" in responder) Issue found in: This typo was originally detected in 1.0.1c (also line 1412) but I checked the latest source to verify the bug still exists in 1.0.1e (line 1412) Patch submitted? Y

Re: [openssl.org #3106] [PATCH] Fix build with OPENSSL_NO_NEXTPROTONEG.

2013-08-07 Thread Adam Langley via RT
On Mon, Aug 5, 2013 at 7:50 PM, Piotr Sikora wrote: > While it cannot be enabled via ./config options, compiling OpenSSL > with this define turned out to be extremely useful while adding ALPN > support to 3rd-party software (i.e. to make sure that nothing in the > added ALPN support relies on NPN