RE: [PATCH] changes required for OpenVMS in 1.0.2

2014-01-07 Thread Zoltan Arpadffy
ot; + $ WRITE H_FILE "#define OPENSSL_NO_LIBUNBOUND" $ WRITE H_FILE "" $! $! Add in the common "crypto/opensslconf.h.in". Whit this change OPENSSL-1.0.2-STABLE-SNAP-20140107 builds correctly and the tests are passed as well on OpenVMS. Thank you. R

[PATCH] changes required for OpenVMS in 1.0.2

2014-01-07 Thread Zoltan Arpadffy
Hello, I have tested OPENSSL-1.0.2-STABLE-SNAP-20140107 and found the following problems that are mostly corrected (except the missing header file) with the patch below: 1. missing header file unbound.h #include .^ %CC-F-NOINCLFILEF, Cannot find file specified in #include directive

RE: Safe ECC curves

2014-01-07 Thread Salz, Rich
Ø 1.3.6.1.4.1.22232.15.0: Curve25519 (That's out of my arc) I’ve been in touch with Dan, who sent me to Werner Koch, who said that GPG is using { "Curve25519", "1.3.6.1.4.1.3029.1.5.1" }, -- Peter Gutmann's arc So we should use that I’m gonna post an I-D today or tomorrow, and ask the TLS-

openssl-1.0.0l compile error with VS2013 & Win8.1

2014-01-07 Thread Arnaud Grandville
hi, I've got an error when compiling last release of openssl under vs2103 & win8.1 D:\..\openssl-1.0.0l>ms\32all.bat .. lot of output ... Copying: ./ssl/kssl.h to inc32/openssl/kssl.h         cl /Fotmp32.dbg\cryptlib.obj  -Iinc32 -Itmp32.dbg /MTd /Od -DDEBUG -D_DE BUG -DOPENSSL_THREADS  -DDS

openssl-1.0.0l compile error with VS2013 & Win8.1

2014-01-07 Thread Arnaud Grandville
hi, I've got an error when compiling last release of openssl under vs2103 & win8.1 D:\..\openssl-1.0.0l>ms\32all.bat .. lot of output ... Copying: ./ssl/kssl.h to inc32/openssl/kssl.h cl /Fotmp32.dbg\cryptlib.obj -Iinc32 -Itmp32.dbg /MTd /Od -DDEBUG -D_DE BUG -DOPENSSL_THREADS -DDS

openssl-1.0.0l compile error with VS2013 & Win8.1

2014-01-07 Thread Arnaud Grandville
hi, I've got an error when compiling last release of openssl under vs2103 & win8.1 D:\..\openssl-1.0.0l>ms\32all.bat .. lot of output ... Copying: ./ssl/kssl.h to inc32/openssl/kssl.h cl /Fotmp32.dbg\cryptlib.obj -Iinc32 -Itmp32.dbg /MTd /Od -DDEBUG -D_DE BUG -DOPENSSL_THREADS -DDS

[openssl.org #3218] Typo in .../demos/cms_dec.c

2014-01-07 Thread noloa...@gmail.com via RT
Reported by a fellow on Stack Overflow (tuxmania) trying to run the cms demos .../demos/cms_enc.c and .../demos/cms_dec.c Around line 50 of cms_dec.c. * OLD: /* Decrypt S/MIME message */ if (!CMS_decrypt(cms, rkey, rcert, out, NULL, 0)) goto err; Causes the following: 1405

[openssl.org #3217] [PATCH] changes in 1.0.0l and 1.0.1f required for OpenVMS

2014-01-07 Thread Zoltan Arpadffy via RT
Hello, Thank you for releasing 1.0.0l and 1.0.1f. I tested them right away (that I haven't done for more than a year) found that there are needed some changes in order to make the it work under OpenVMS. 1. I have tested for the very first time with HP C V7.3-020 on OpenVMS IA64 V8.4 and found

[openssl.org #3216] Invalid shell syntax "==" in test/testssl (only 0.9.8 and 1.0.0)

2014-01-07 Thread Rainer Jung via RT
File test/testssl in branches 0.9.8 and 1.0.0 contains the line if [ $protocol == "SSLv3" ] ; then for 1.0.1, 1.0.2 and master it is: if [ $protocol = "SSLv3" ] ; then The script is executed by /bin/sh and the "==" syntax is not supported for all basic shells, e.g. not on Solaris. Other

Re: OpenSSL version 1.0.1f released

2014-01-07 Thread Jeffrey Walton
*) Integrate hostname, email address and IP address checking with certificate verification. New verify options supporting checking in opensl utility. [Steve Henson] *) Fixes and wildcard matching support to hostname and email checking functions. Add manual page. [Florian

Re: OpenSSL version 1.0.1f released

2014-01-07 Thread Erik Tkal
Also, the release notes list: Fix for TLS record tampering bug CVE-2013-4353 But the list of OpenSSL vulnerabilities linked from there does not mention this anywhere... Erik Tkal et...@me.com uʍop ǝpısdn ǝɹɐ noʎ sıɥʇ pɐǝɹ uɐɔ noʎ ɟı On 06 Jan 2014, at 10: