[openssl.org #2600] Inconsistent end of lines

2014-09-10 Thread Rich Salz via RT
fixed in master commit 5f855569c452262a8770ed822c7f98f5fac3e3d6 Author: Rich Salz Date: Mon Sep 8 16:27:29 2014 -0400 RT2600: Change Win line-endings to Unix. For consistency. Reviewed-by: Bodo Moeller -- Rich Salz, OpenSSL dev team; rs...@openssl.org _

[openssl.org #3515] [PATCH] openssl pkcs12 to use 3DES with RC2-40 is not available

2014-09-10 Thread Rich Salz via RT
seems reasonable commit 92830dc1ca0bb2d12bf05a12ebb798709595fa5a Author: Colm MacCarthaigh Date: Wed Sep 10 17:16:57 2014 -0400 RT3515: Use 3DES in pkcs12 if built with no-rc2 -- Rich Salz, OpenSSL dev team; rs...@openssl.org ___

[openssl.org #63] something like a bug in pkcs12: p12_kiss.c

2014-09-10 Thread Rich Salz via RT
The current code doesn't free the returned ca list. I don't know when that was fixed. -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project http://www.openssl.org Development Mailing

RE: Outstanding issues since 2014 09 09

2014-09-10 Thread Salz, Rich
> making install in engines/ccgost... Fixed, sorry for the inconvenience. OpenSSL_1_0_2-stable 3258429 RT3271 update; extra; semi-colon; confuses; some; master cb4bb56 RT3271 update; extra; semi-colon; confuses; some; Author: Rich Salz Date: Wed Sep 10 15:05:38 2014 -0400

[openssl.org #689] ENGINE fallback to software

2014-09-10 Thread Rich Salz via RT
It's been a decade. The file mentioned in the diff doesn't even exist any more. Setting expectations appropriately: closing the ticket. -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project

[openssl.org #590] BUG REPORT: X509_get_signature_type() returning NID_undef

2014-09-10 Thread Rich Salz via RT
Very old release. Not enough information to reproduce. Pretty sure openssl (now) recognizes and handles rsa/sha1. Closing ticket. -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project

[openssl.org #11] Fw: trustway pkcs11 engine for openssl

2014-09-10 Thread Rich Salz via RT
This was obsoleted by ticket 913, which I closed as something too old that we're not going to do. So closing this. Having said that (twice, actually), a PKCS11 ENGINE would be a cool thing to have. -- Rich Salz, OpenSSL dev team; rs...@openssl.org _

[openssl.org #913] [PATCH] pkcs11 engine

2014-09-10 Thread Rich Salz via RT
These diffs are huge and old and dont' seem well-integrated with the current ENGINE structure. To set expectations properly: we're not doing to do this. -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project

[openssl.org #2560] missing NULL pointer check in ocsp_req_find_signer

2014-09-10 Thread Rich Salz via RT
And hey, wasn't it a neat coincidence that the OCSP RFC is 2560? :) OpenSSL_1_0_1-stable bea9a17 RT2560: missing NULL check in ocsp_req_find_signer OpenSSL_1_0_2-stable a9d928a RT2560: missing NULL check in ocsp_req_find_signer HEAD b2aa38a RT2560: missing NULL check in ocsp_req_find_signer Aut

RE: [openssl.org #3523] bug report: s_client writes to STDERR

2014-09-10 Thread Salz, Rich
Can you cut/paste the output you're getting? I think this is fixed in the post-1.0.2 branch at least.

RE: [openssl.org #2560] missing NULL pointer check in ocsp_req_find_signer

2014-09-10 Thread Salz, Rich
> It is from real world application. In some case the X509_find_by_subject > (called from ocsp_req_find_signer) returned NULL, and the whole > application halted. Ah, I misunderstood the ticket. Add "if (!signer) return 0;" after the call to X509_find_by_subject. I'll submit that shortly. Than

Outstanding issues since 2014 09 09

2014-09-10 Thread The Doctor
Script started on Wed Sep 10 05:48:42 2014 doctor.nl2k.ab.ca//usr/source/openssl-1.0.2-stable-SNAP-20140910$ make test testing... (cd ..; make DIRS=crypto all) making all in crypto... ar r ../libcrypto.a cryptlib.o mem.o mem_dbg.o cversion.o ex_data.o cpt_err.o ebcdic.o uid.o o_time.o o_str.o

RE: [openssl.org #2560] missing NULL pointer check in ocsp_req_find_signer

2014-09-10 Thread Cséplő László via RT
It is from real world application. In some case the X509_find_by_subject (called from ocsp_req_find_signer) returned NULL, and the whole application halted. From: Rich Salz via RT Sent: Tuesday, September 09, 2014 9:50 PM To: Cséplő László Cc: openssl-dev

[openssl.org #3523] bug report: s_client writes to STDERR

2014-09-10 Thread Michael Hatfield via RT
Bug Report OS: Fedora 20, Linux 3.15.10 x86_64 OpenSSL: 1.0.1e Using: $ openssl s_client -crlf -starttls smtp -connect::587 Some initial output is sent to STDOUT, some to STDERR. The problem is that the SMTP server greeting is written to STDERR. This seems incorrect, as the remaining server

Re: [openssl.org #2962] [patch] openssl s_{client,server} improvements for Kerberos

2014-09-10 Thread Richard Silverman
On Tue, 9 Sep 2014, Rich Salz via RT wrote: Fixed in https://github.com/akamai/openssl/tree/rsalz-monolith/apps for integration after 1.0.2 commit f4f79df1a2e1d295e93afe68691499ec034b76ad Author: Richard Silverman Date: Tue Sep 9 12:37:27 2014 -0400 RT2962: add -keytab and -krb5svc flags. Ad