Re: [openssl-dev] [openssl.org #3627] Enhancement request: add more Protocol options for SSL_CONF_CTX

2014-12-12 Thread mancha
On Thu, Dec 11, 2014 at 07:37:39PM +0100, Steffen Nurpmeso wrote: Salz, Rich via RT r...@openssl.org wrote: So you want a separate openssl-conf package. Fine, then provide it and give an easy mechanism for applications to hook into it. And for users to be able to overwrite system

Re: [openssl-dev] [openssl.org #3627] Enhancement request: add more Protocol options for SSL_CONF_CTX

2014-12-12 Thread mancha
On Thu, Dec 11, 2014 at 07:37:39PM +0100, Steffen Nurpmeso wrote: Salz, Rich via RT r...@openssl.org wrote: So you want a separate openssl-conf package. Fine, then provide it and give an easy mechanism for applications to hook into it. And for users to be able to overwrite system

[openssl-dev] [openssl.org #3592] bug report. Crash. Critical? Security bug?

2014-12-12 Thread Matt Caswell via RT
On Wed Dec 10 09:18:57 2014, v.badal...@open-bs.ru wrote: Looks like need add some check to return code len I agree. Co-incidentally I already have a very similar fix for the same defect going through the review process. Matt ___ openssl-dev

[openssl-dev] [openssl.org #3592] bug report. Crash. Critical? Security bug?

2014-12-12 Thread Matt Caswell via RT
On Wed Dec 10 10:08:48 2014, v.badal...@open-bs.ru wrote: Also valgrind output ==17767== Thread 37: ==17767== Source and destination overlap in memcpy(0x253bfcbd, 0x7e9c51b, 4294967209) This is interesting. That equates to -87. I think there is a signed/unsigned conversion issue

[openssl-dev] [openssl.org #3631] Bug in the binary search in OBJ_bsearch_ex_ in obj_dat.c (1.0.1j)

2014-12-12 Thread Matthias Mucha via RT
Hello, I strapped down OpenSSL 1.0.1j to only the PEM to RSA, BIO and RSA public decrypt functions. So a bug in the binary search in appeared: Current code: const void *OBJ_bsearch_ex_(const void *key, const void *base_, int num, int size,

[openssl-dev] [openssl.org #3632] Enhancement request: CONF_modules_load_file(): please include filename in error message

2014-12-12 Thread Steffen Nurpmeso via RT
So i follow Rich Salz and am adding support for SSL_CONF_modules_load_file() (but i'm still wondering a bit why i do that) and while testing (with v1.0.2 beta4) i see messages like error:02001002:system library:fopen:No such file or directory error:0200100D:system library:fopen:Permission

[openssl-dev] FW: [openssl.org #3629] Bug report: run in speed.c should be declared as volatile

2014-12-12 Thread Lawrence via RT
One correction, the value of run can be changed asynchronously because of the interaction of signal and alarm, alarm raise the signal, signal register the handler, the handler is sig_done, From: Lawrence [mailto:lawre...@codeaurora.org] Sent: Wednesday, December 10, 2014 6:32 PM To:

[openssl-dev] [openssl.org #3633] Enhancement request: CONF_modules_load_file(): please add a CONF_MFLAGS_LOAD_USER_FILE

2014-12-12 Thread Steffen Nurpmeso via RT
Hello, while following Rich Salz's suggestion to make use of CONF_modules_load_file() i stumbled personally over the restriction that only a global openssl.cnf seems to be supported. There is no support for automatic loading of a $HOME/.openssl.cnf on top of the global version. And whereas

[openssl-dev] [openssl.org #1688] Re: [PATCH] Fix parallel build

2014-12-12 Thread Rich Salz via RT
master c3f2225 RT1688: Add dependencies for parallel make Author: Rich Salz rs...@openssl.org Date: Fri Dec 12 13:17:51 2014 -0500 RT1688: Add dependencies for parallel make Reviewed-by: Dr. Stephen Henson st...@openssl.org ; -- Rich Salz, OpenSSL dev team; rs...@openssl.org

[openssl-dev] [openssl.org #3634] Docfix: doc/apps/enc.pod says aes-[128|192|256] but means aes[..]

2014-12-12 Thread Steffen Nurpmeso via RT
..so that even after OpenSSL_add_all_algorithms(3) EVP_get_cipherbyname(3) fails to load aes-128 as an alias for aes-128-cbc. --steffen diff --git a/doc/apps/enc.pod b/doc/apps/enc.pod index 41791ad..88e8b79 100644 --- a/doc/apps/enc.pod +++ b/doc/apps/enc.pod @@ -282,7 +282,7 @@ authentication

[openssl-dev] [openssl.org #3635] Build error with 1.0.2-beta3

2014-12-12 Thread Paul A. Steckler via RT
Hi, I'm trying to build 1.0.2-beta3 on Fedora 20 x86_64. I've configured with some xxx_DEBUG flags, which results in a compile failure in ssl/t1_enc.c. See the attached testlog for the exact flags used. Application details: N/A Problem Description: These compile-time (warnings and)

[openssl-dev] [openssl.org #3636] BIO_read() (enc_read()) with 0 length

2014-12-12 Thread Istvan Noszticzius via RT
Dear Openssl-bugs, According to the BIO_read() documentation [1]: All these functions return either the amount of data successfully read or written (if the return value is positive) or that no data was successfully read or written if the result is 0 or -1.. However if there is a decryption BIO

Re: [openssl-dev] [openssl.org #3635] Build error with 1.0.2-beta3

2014-12-12 Thread Paul A. Steckler via RT
Please note that in the testlog I had attached to my earlier message, there was a bad decrypt error message for des-ede-cbc. That's not an issue for me, particularly, but it may be for others! -- Paul On Fri, Dec 12, 2014 at 11:03 AM, Paul A. Steckler st...@stecksoft.com wrote: Hi, I'm