Re: [openssl-dev] Upcoming build system change

2016-01-23 Thread Tim Rice
On Sat, 23 Jan 2016, Corinna Vinschen wrote: > diff -upr origsrc/openssl-1.1-rc1/util/mkbuildinf.pl > src/openssl-1.1-rc1/util/mkbuildinf.pl > --- origsrc/openssl-1.1-rc1/util/mkbuildinf.pl2016-01-23 > 21:02:18.386710976 +0100 > +++ src/openssl-1.1-rc1/util/mkbuildinf.pl2016-01-23 21

Re: [openssl-dev] Upcoming build system change

2016-01-23 Thread Richard Levitte
In message <20160123210116.gb13...@calimero.vinschen.de> on Sat, 23 Jan 2016 22:01:16 +0100, Corinna Vinschen said: vinschen> On Jan 23 21:35, Kurt Roeckx wrote: vinschen> > On Sat, Jan 23, 2016 at 09:27:58PM +0100, Corinna Vinschen wrote: vinschen> > > vinschen> > > Last but not least, we have

Re: [openssl-dev] Upcoming build system change

2016-01-23 Thread Richard Levitte
In message <20160123202758.ga13...@calimero.vinschen.de> on Sat, 23 Jan 2016 21:27:58 +0100, Corinna Vinschen said: vinschen> Hi Richard, vinschen> vinschen> On Jan 18 23:50, Richard Levitte wrote: vinschen> > FYI, vinschen> > vinschen> > The branch has been updated, the Makfile template now h

Re: [openssl-dev] SSL_get0_dane_authority() and session reuse

2016-01-23 Thread Viktor Dukhovni
> On Jan 23, 2016, at 6:42 AM, Claus Assmann wrote: > > For SMTP STARTTLS I try to determine some properties of the TLS > connection so the MTA can decide whether the connection should be > aborted or continue. Those properties are for example: cert issuer, > cert subject, cipher bits, verifica

Re: [openssl-dev] Upcoming build system change

2016-01-23 Thread Kurt Roeckx
On Sat, Jan 23, 2016 at 10:01:16PM +0100, Corinna Vinschen wrote: > On Jan 23 21:35, Kurt Roeckx wrote: > > On Sat, Jan 23, 2016 at 09:27:58PM +0100, Corinna Vinschen wrote: > > > > > > Last but not least, we have another problem with enginesdir. To allow a > > > rolling release cycle, we have to

Re: [openssl-dev] Upcoming build system change

2016-01-23 Thread Corinna Vinschen
On Jan 23 21:35, Kurt Roeckx wrote: > On Sat, Jan 23, 2016 at 09:27:58PM +0100, Corinna Vinschen wrote: > > > > Last but not least, we have another problem with enginesdir. To allow a > > rolling release cycle, we have to support multiple versions of openssl > > in parallel. The problem here is

Re: [openssl-dev] Upcoming build system change

2016-01-23 Thread Kurt Roeckx
On Sat, Jan 23, 2016 at 09:27:58PM +0100, Corinna Vinschen wrote: > > Last but not least, we have another problem with enginesdir. To allow a > rolling release cycle, we have to support multiple versions of openssl > in parallel. The problem here is that the enginesdir needs to be > versioned to

Re: [openssl-dev] Upcoming build system change

2016-01-23 Thread Corinna Vinschen
Hi Richard, On Jan 18 23:50, Richard Levitte wrote: > FYI, > > The branch has been updated, the Makfile template now has install > targets as well, and I did the mods I could see would be necessary for > Cygwin and Mingw. I would appreciate it if someone could help me try > those out. > > Remem

Re: [openssl-dev] Openssl-SNAP-20160123 issues Re: openssl-SNAP-20160121 issues

2016-01-23 Thread Salz, Rich
Perhaps it's time to level-set. Snapshots are literally snapshots of the daily tree. There's no expectation that things work, or even compile. ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

[openssl-dev] Openssl-SNAP-20160123 issues Re: openssl-SNAP-20160121 issues

2016-01-23 Thread The Doctor
g pointer to incomplete type > > str_lib.c: In function `STORE_list_public_key_next': > > str_lib.c:765: dereferencing pointer to incomplete type > > The fix for now is to not build the store code, it is not ready. > When will it be ready? Also now in openssl-SN

Re: [openssl-dev] [openssl.org #4148] PCKS1 type 1 Padding check error

2016-01-23 Thread Kurt Roeckx via RT
On Wed, Nov 18, 2015 at 03:24:51PM +, Özgan, Tolgahan Jonas via RT wrote: > Dear List, > I have found a BUG in the function > " RSA_padding_check_PKCS1_type_1 " [...] > > the pointer p is incremented after the check therefore p is always the first > octet of the padded string. In the Case of

[openssl-dev] [openssl.org #4268] [typo?] doc/ssl/SSL_get_session.pod

2016-01-23 Thread Claus Assmann via RT
Not sure whether this patch is right, but AFAICT SSL_get_session() does not return a "Pointer to an SSL". diff --git a/doc/ssl/SSL_get_session.pod b/doc/ssl/SSL_get_session.pod index d360e8a..d8aa705 100644 --- a/doc/ssl/SSL_get_session.pod +++ b/doc/ssl/SSL_get_session.pod @@ -58,7 +58,7 @@ The f

Re: [openssl-dev] SSL_get0_dane_authority() and session reuse

2016-01-23 Thread Claus Assmann
On Fri, Jan 22, 2016, Viktor Dukhovni wrote: > > On Jan 22, 2016, at 7:35 PM, Claus Assmann wrote: > > SSL_get0_dane_authority() returns -1 on a reused TLS session > > in my test program. > It is expected, but probably should be documented. Thanks; is there any chance to change that behaviour?

[openssl-dev] [openssl.org #4267] Missing accessor to the EVP_CIPHER_CTX member oiv

2016-01-23 Thread Dmitry Belyavsky via RT
Hello, After making the EVP_CIPHER_CTX struct opaque I found that there is a missing non-const accessor to the oiv member. It is used in GOST engine when we set the cipher parameters from the ASN1 parameters. Thank you! -- SY, Dmitry Belyavsky ___ op