Re: [openssl.org #3469] problem with commit 3009244da47b989c4cc59ba02cf81a4e9d8f8431 - global_mask needs to be more liberal

2014-07-29 Thread Dr. Stephen Henson
On Tue, Jul 29, 2014, Kurt Roeckx wrote: > On Tue, Jul 29, 2014 at 10:56:14AM +0100, Rob Stradling wrote: > > On 27/07/14 14:30, Stephen Henson via RT wrote: > > >On Mon Jul 21 20:29:47 2014, v...@v13.gr wrote: > > >> > > >>I'm not sure whether this change is needed at all as there's no > > >>just

Re: [openssl.org #3469] problem with commit 3009244da47b989c4cc59ba02cf81a4e9d8f8431 - global_mask needs to be more liberal

2014-07-29 Thread Kurt Roeckx
On Tue, Jul 29, 2014 at 10:56:14AM +0100, Rob Stradling wrote: > On 27/07/14 14:30, Stephen Henson via RT wrote: > >On Mon Jul 21 20:29:47 2014, v...@v13.gr wrote: > >> > >>I'm not sure whether this change is needed at all as there's no > >>justification for it. > > > >The justification is in RFC32

[openssl.org #1386] Bug Report OpenSSL

2014-07-29 Thread Rich Salz via RT
Will be fixed in the release after 1.0.2, which unified all command arg-parsing. Thanks. -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project http://www.openssl.org Development Maili

[openssl.org #1379] Build failure on cygwin: #error MDC2 is disabled

2014-07-29 Thread Rich Salz via RT
Old release, no longer an issue. -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Au

[openssl.org #1351] Bug Report - error generating a cert request

2014-07-29 Thread Rich Salz via RT
Very old release, can't reproduce. Closing ticket. -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project http://www.openssl.org Development Mailing List openssl-

[openssl.org #1349] Error passing password with stdin

2014-07-29 Thread Rich Salz via RT
Probably an old bug about stripping line endings. Closing this. -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project http://www.openssl.org Development Mailing List

[openssl.org #1336] OpenSSL support for Kerberos

2014-07-29 Thread Rich Salz via RT
Looks like this was already implemented awhile ago. -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project http://www.openssl.org Development Mailing List openssl

[openssl.org #1295] Crash in ssl3_write_pending

2014-07-29 Thread Rich Salz via RT
Very old release, can't reproduce, closing ticket. -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project http://www.openssl.org Development Mailing List openssl-

[openssl.org #3478] Re: Need guidance to replace HMAC-SHA1 implementation via engine

2014-07-29 Thread Jitendra Lulla via RT
Hi Steve, Please refer the following mail from you: http://www.mail-archive.com/openssl-dev%40openssl.org/msg32918.html "... The high level MAC (including HMAC) interfaces go through EVP_PKEY treating it as a signing operation. It *is* possible to redirect HMAC in that way but only if the applic

Need help cross-compiling OpenSSL FIPS

2014-07-29 Thread Boehm, Eric
I've read other messages on this topic but I am still not clear on what I need to do to get this to work. I need to cross-compile a FreeBSD binary on a Linux system. I can build natively on both FreeBSD and Linux. I am using openssl-1.0.1h and openssl-fips-2.0.5. My problem is that fipsld wants

Re: [openssl.org #3469] problem with commit 3009244da47b989c4cc59ba02cf81a4e9d8f8431 - global_mask needs to be more liberal

2014-07-29 Thread Rob Stradling
On 27/07/14 14:30, Stephen Henson via RT wrote: On Mon Jul 21 20:29:47 2014, v...@v13.gr wrote: I'm not sure whether this change is needed at all as there's no justification for it. The justification is in RFC3280 et al: "The UTF8String encoding [RFC 2279] is the preferred encoding, and all

[openssl.org #1255] about S/MIME sign code.

2014-07-29 Thread Rich Salz via RT
Old release, cannot reproduce. -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Auto

[openssl.org #1227] Runnning openssl test

2014-07-29 Thread Rich Salz via RT
you have to look at the exit code. -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org

Re: Need guidance to replace HMAC-SHA1 implementation via engine

2014-07-29 Thread Dr. Stephen Henson
On Tue, Jul 29, 2014, Jitendra Lulla wrote: > Hi Steve, > > Please refer the following mail from you: > > http://www.mail-archive.com/openssl-dev%40openssl.org/msg32918.html > > "... > The high level MAC (including HMAC) interfaces go through EVP_PKEY treating it > as a signing operation. It *i

Re: Need guidance to replace HMAC-SHA1 implementation via engine

2014-07-29 Thread Jitendra Lulla
Hi Steve, Please refer the following mail from you: http://www.mail-archive.com/openssl-dev%40openssl.org/msg32918.html "... The high level MAC (including HMAC) interfaces go through EVP_PKEY treating it as a signing operation. It *is* possible to redirect HMAC in that way but only if the applic