[openssl.org #1104] [Bug Reoprt] -days parameter overflow

2014-09-04 Thread Stephen Henson via RT
On Thu Sep 04 23:19:14 2014, rsalz wrote: > openssl uses time_t for its internal time value. > On a platform where time_t is 32 bits, the maximum time value is sometime in > the year 2038 Actually this is no longer the case. There was a time_t depencency in OpenSSL 0.9.8 and earlier which caused o

[openssl.org #1104] [Bug Reoprt] -days parameter overflow

2014-09-04 Thread Rich Salz via RT
openssl uses time_t for its internal time value. On a platform where time_t is 32 bits, the maximum time value is sometime in the year 2038 -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project

[openssl.org #3260] Several issues with hash algorithm selection in cipher suites

2014-09-04 Thread Rich Salz via RT
We are implementing that the IETF RFC's specify. Closing ticket. -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project http://www.openssl.org Development Mailing List

[openssl.org #3257] [RFE] automatically choose signature hash strength according to key size when generating certificates

2014-09-04 Thread Rich Salz via RT
We use sha256 by default for interoperability. If that's not an issue, set the digest you want directly. -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project http://www.openssl.org

[openssl.org #3227] Deadlock in OpenSSL 1.0.1e.

2014-09-04 Thread Rich Salz via RT
Sorry, not enough information provided to have any hope of reproducing or debugging this. -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project http://www.openssl.org Development Mail

Re: [openssl.org #3334] Win32, SSL_add_dir_cert_subjects_to_stack() does not work.

2014-09-04 Thread Phil Mesnier
Hi Richard, Thank you for following up. I think we are on the same page regarding directories. The API call involved here was SSL_add_dir_cert_subjects_to_stack, which failed on windows. The reason I have the LP_find_file specifically skip directories is that directories cannot be opened as f

[openssl.org #3070] Bug Report

2014-09-04 Thread Rich Salz via RT
This is a limitation on 32bit platforms where time_t cannot store dates past 2038. -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project http://www.openssl.org Development Mailing Lis

[openssl.org #3024] Segfault with 'openssl enc' when using aes-cbc-hmac-sha1

2014-09-04 Thread Rich Salz via RT
The current releases warn about those modes not being supported. -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project http://www.openssl.org Development Mailing List

RE: [openssl.org #839] Patch pk7_lib.c:PKCS7_get_recip_info()

2014-09-04 Thread Salz, Rich
> Does it mean that S/MIME ops will be deprecated? No. Just that this is an old bug and that CMS_xxx is the way forward. At some point it'd be nice to have an SMIME3_xxx API, but I wouldn't hold my breath :) -- Principal Security Engineer Akamai Technologies, Cambridge MA IM: rs...@jabber.me

Re: [openssl.org #839] Patch pk7_lib.c:PKCS7_get_recip_info()

2014-09-04 Thread Dmitry Belyavsky
Hello Rich, Does it mean that S/MIME ops will be deprecated? Thank you! On Thu, Sep 4, 2014 at 4:14 PM, Rich Salz via RT wrote: > After internal discussoin: PCKS7 is an old API, CMS_ is the way to go. > Closing this ticket. > -- > Rich Salz, OpenSSL dev team; rs...@openssl.org > > __

Adding support for x86

2014-09-04 Thread Tizen
I am working on adding x86 libraries for OpenSSL, so that developers trying to use it need not do the building part. Please add me to the list so that I can understand better on how to make this contribution. Thanks Gayathri __

Re: Openssl build errors on zLinux and HP-ita

2014-09-04 Thread Tom Francis
On Sep 3, 2014, at 11:41 AM, Andy Polyakov wrote: >> In the ld man page, I could find help for option +nosectionmerge. >> +nosectionmerge >> With the -r option, allow procedures to be >> positioned independently. The default is to merg

[openssl.org #3063] [PATCH] exp_zero_mod_one

2014-09-04 Thread Emilia Käsper via RT
Thanks! This has now been applied to all branches. (Original commit 2b0180c37fa6ffc48ee40caa831ca398b828e680) __ OpenSSL Project http://www.openssl.org Development Mailing List

[openssl.org #839] Patch pk7_lib.c:PKCS7_get_recip_info()

2014-09-04 Thread Rich Salz via RT
After internal discussoin: PCKS7 is an old API, CMS_ is the way to go. Closing this ticket. -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project http://www.openssl.org Development Ma

Re: Openssl build errors on zLinux and HP-ita

2014-09-04 Thread Mrunal Nerpawar
Thanks Andy, zLinux worked with "no-asm" thanks a ton! I am working on HP-UX now. Regards, Mrunal On Wed, Sep 3, 2014 at 9:11 PM, Andy Polyakov wrote: > > In the ld man page, I could find help for option +nosectionmerge. > >+nosectionmerge > > With the -