[openssl-dev] [openssl.org #4468] #ifndefs incorrect for GOST

2016-03-21 Thread paul.d...@oracle.com via RT
Attached is a patch that fixes a typo in the #ifndef OPENSSL_NO_GOST lines in ssl/s3_lib.c regards, Pauli -- Oracle Dr Paul Dale | Cryptographer | Network Security & Encryption Phone +61 7 3031 7217 Oracle Australia -- Ticket here: http://rt.openssl.org/Ticket/Display.html?id=4468 Please

[openssl-dev] [openssl.org #4460] [PATCH] BIO_METHODs should be const

2016-03-21 Thread Rich Salz via RT
done with commit 04f6b0f. Thanks ! -- Ticket here: http://rt.openssl.org/Ticket/Display.html?id=4460 Please log in as guest with password guest if prompted -- openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Re: [openssl-dev] [openssl.org #4455] AutoReply: OpenSUSE 42: undefined reference to `engine_load_afalg_internal'

2016-03-21 Thread noloa...@gmail.com via RT
Still present at 149bd5d6cb393648. If I './config shared', then the issue goes away. The only difference I see is the absence of "no-dynamic-engine [forced]" when "shared" is used. Here's the config with shared: openssl> ./config shared Operating system: x86_64-whatever-linux2 Configuring for

Re: [openssl-dev] 1.1.0-pre5-dev (2016-03-20) v. VMS

2016-03-21 Thread Richard Levitte
In message <16032113480098_2020f...@antinode.info> on Mon, 21 Mar 2016 13:48:01 -0500 (CDT), "Steven M. Schweda" said: sms> >I'll try it again with more physical, fewer logical names. Perhaps sms> > some f$trnlnm() action (lather, rinse, repeat) could solve this kind of

Re: [openssl-dev] 1.1.0-pre5-dev (2016-03-20) v. VMS

2016-03-21 Thread Steven M. Schweda
>I'll try it again with more physical, fewer logical names. Perhaps > some f$trnlnm() action (lather, rinse, repeat) could solve this kind of > thing automatically. That seems to help considerably (more relative dir specs). Oddities from test: [.recipes]25-test_pkcs7.t ... ok

Re: [openssl-dev] [openssl.org #4467] SSL_Connect crashed

2016-03-21 Thread Tiantian Liu via RT
Hi Victor, Thanks for your response. I will inspect the field you mentioned. Thanks! Tyler Tiantian(Tyler) Liu Analyste Programmeur | Programmer Analyst Tender Retail ACCEO Solutions Inc. 416-498-1200 ext. 301 Suite 400 – 2 Lansing Square Toronto, Ontario, Canada M2J 4P8 acceo.com

Re: [openssl-dev] [openssl.org #4467] SSL_Connect crashed

2016-03-21 Thread Viktor Dukhovni via RT
> On Mar 21, 2016, at 11:51 AM, Tiantian Liu via RT wrote: > > > srp_ctx = {SRP_cb_arg = 0x0, TLS_ext_srp_username_callback = 0, > SRP_verify_param_callback = 0, SRP_give_srp_client_pwd_callback = 0, >login = 0x44454c4c , N = 0x9a285f8, g = > 0x61, s = 0x9a29820, B =

Re: [openssl-dev] [openssl.org #4467] SSL_Connect crashed

2016-03-21 Thread Viktor Dukhovni
> On Mar 21, 2016, at 11:51 AM, Tiantian Liu via RT wrote: > > > srp_ctx = {SRP_cb_arg = 0x0, TLS_ext_srp_username_callback = 0, > SRP_verify_param_callback = 0, SRP_give_srp_client_pwd_callback = 0, >login = 0x44454c4c , N = 0x9a285f8, g = > 0x61, s = 0x9a29820, B =

Re: [openssl-dev] Is a "no next protocol negotiation" (no-npn) a supported option?

2016-03-21 Thread Michel
Hi Jeff, In case it may still be usefull, I have updated the patch against today's git repo. I was able to build OpenSSL VC-WIN32 configured with no-nextprotoneg option. Regards, Michel. no-nextproto-1.1.0.patch Description: Binary data -- openssl-dev mailing list To unsubscribe:

[openssl-dev] [openssl.org #4467] SSL_Connect crashed

2016-03-21 Thread Tiantian Liu via RT
Hi, Good morning everyone! I have an issue about OpenSSL. I installed OpenSSL-1.0.1p on a 32-bit Linux machine. Our application uses the OpenSSL library to communicate with other hosts over TLS1.2 protocol. The OpenSSL library has been working for us pretty well, until last Friday one

[openssl-dev] [openssl.org #4459] openssl-1.1.0-pre4: make install fals on solaris64-x86_64-gcc.

2016-03-21 Thread Richard Levitte via RT
Fix merged, commit 2b364f615bbe913ba9121ddb4018da505b407882 Closing ticket. Thank you Cheers, Richard Vid Mon, 21 Mar 2016 kl. 09.40.33, skrev yoi_no_myou...@yahoo.co.jp: > Thank you, Richard. > Make install succeeded with your new patch. > > --- Kiyoshi > > > > > >

Re: [openssl-dev] 1.1.0-pre5-dev (2016-03-20) v. VMS

2016-03-21 Thread Steven M. Schweda
From: Richard Levitte > Could you show me how you configured and what your default directory > was? Also, if you could tell me the difference between utility5_dev > and ALP$DKC100, that would be great. ALP $ show logical utility5_dev "UTILITY5_DEV" = "ALP$DKC100:"

Re: [openssl-dev] "make depend" is broken in current Github

2016-03-21 Thread Blumenthal, Uri - 0553 - MITLL
Some header files moved. Clean and rebuild. I’ve done it several times (./Configure… then “make depend && make clean && make all …” - you know the drill), but after this email it started working. No update on git that could claim responsibility for this success. Puzzling, but… From:

Re: [openssl-dev] "make depend" is broken in current Github

2016-03-21 Thread Salz, Rich
Some header files moved. Clean and rebuild. -- Senior Architect, Akamai Technologies IM: richs...@jabber.at Twitter: RichSalz From: Blumenthal, Uri - 0553 - MITLL [mailto:u...@ll.mit.edu] Sent: Monday, March 21, 2016 9:39 AM To: openssl-dev Subject: [openssl-dev] "make depend" is broken in

Re: [openssl-dev] "make depend" is broken in current Github

2016-03-21 Thread Richard Levitte
Hold on, stop! Put the blake2 header back where you found it, then do this: $ perl Configure reconf Then try building again Cheers Richard "Blumenthal, Uri - 0553 - MITLL" skrev: (21 mars 2016 14:39:28 CET) >After fixing “blake2_locl.h” (by copying it manually to

[openssl-dev] "make depend" is broken in current Github

2016-03-21 Thread Blumenthal, Uri - 0553 - MITLL
After fixing “blake2_locl.h” (by copying it manually to crypto/include/internal), same problem with ct_int.h: clang -DZLIB -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_THREADS -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5

[openssl-dev] [openssl.org #4465] PKCS12_newpass memory leak

2016-03-21 Thread Ramūnas Jurgilas via RT
I did write function which changes PKCS12 passphrase. I noticed that PKCS12_newpass function leaks memory. Memory leak disappears when commenting out line where is PKCS12_newpass func. Below I posted this code which I am using. I am using OpneSSL 1.0.2g version. Could you please give me

[openssl-dev] [openssl.org #4466] Memory leak in PKCS12_newpass function

2016-03-21 Thread Ramūnas Jurgilas via RT
I did write function which changes PKCS12 passphrase. I noticed that PKCS12_newpass function leaks memory. Memory leak disappears when commenting out line where is PKCS12_newpass func. Below I posted this code which I am using. I am using OpneSSL 1.0.2g version. Could you please give me

Re: [openssl-dev] Question about adding a new cipher [I am not asking the old question]

2016-03-21 Thread John Hunter
Got it, thanks :) On Mon, Mar 21, 2016 at 8:09 PM, Dmitry Belyavsky wrote: > Dear John, > > On Mon, Mar 21, 2016 at 2:52 PM, John Hunter wrote: >> >> Hi Dmitry, >> Thank you for you quick reply. >> >> On Mon, Mar 21, 2016 at 7:38 PM, Dmitry Belyavsky

[openssl-dev] Missing blake2_locl.h?

2016-03-21 Thread Blumenthal, Uri - 0553 - MITLL
With the current Github code (1.1-pre…) after ./Configure xxx and “make depend && make clean && make all": clang -DZLIB -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_THREADS -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m

Re: [openssl-dev] Question about adding a new cipher [I am not asking the old question]

2016-03-21 Thread Dmitry Belyavsky
Dear John, On Mon, Mar 21, 2016 at 2:52 PM, John Hunter wrote: > Hi Dmitry, > Thank you for you quick reply. > > On Mon, Mar 21, 2016 at 7:38 PM, Dmitry Belyavsky > wrote: > > Hello John, > > > > On Mon, Mar 21, 2016 at 1:53 PM, John Hunter

Re: [openssl-dev] [openssl.org #4464] UEFI/EDK2 build broken by removal of 'make files'.

2016-03-21 Thread David Woodhouse
On Mon, 2016-03-21 at 11:55 +0100, Richard Levitte wrote: > Something like this in the directory where you find configdata.pm: > >     $ perl opensslinf.pl > OpensslLib.inf > > opensslinf.pl:  ... That works; thank you. It appears to give me rand/rand_vms.c which I didn't have before, that

Re: [openssl-dev] Question about adding a new cipher [I am not asking the old question]

2016-03-21 Thread John Hunter
Hi Dmitry, Thank you for you quick reply. On Mon, Mar 21, 2016 at 7:38 PM, Dmitry Belyavsky wrote: > Hello John, > > On Mon, Mar 21, 2016 at 1:53 PM, John Hunter wrote: >> >> I know that this question had been asked millions of times, I searched the >>

Re: [openssl-dev] Question about adding a new cipher [I am not asking the old question]

2016-03-21 Thread Dmitry Belyavsky
Hello John, On Mon, Mar 21, 2016 at 1:53 PM, John Hunter wrote: > I know that this question had been asked millions of times, I searched the > maillist archives and I know it, and this is not a homework for an academic > project, trust me :) > > In [1], Victor said that we

Re: [openssl-dev] [openssl.org #4325] Unified Builds Don't Work With ARM

2016-03-21 Thread Andy Polyakov via RT
Hi, > There are a few problems that I am facing with unified builds with arm: > > 1. arm_arch.h is not in the include path. > fatal error: arm_arch.h: No such file or directory > > 2. The arm assembler scripts output to stdout > (see attached output.txt) This was addressed in a bigger sweep

Re: [openssl-dev] [openssl.org #4464] UEFI/EDK2 build broken by removal of 'make files'.

2016-03-21 Thread Richard Levitte
Something like this in the directory where you find configdata.pm: $ perl opensslinf.pl > OpensslLib.inf opensslinf.pl: snip 8< --- #! /usr/bin/perl use strict; use lib "."; use configdata qw/%unified_info/; foreach my $product

[openssl-dev] Question about adding a new cipher [I am not asking the old question]

2016-03-21 Thread John Hunter
I know that this question had been asked millions of times, I searched the maillist archives and I know it, and this is not a homework for an academic project, trust me :) In [1], Victor said that we don't need to rebuild OpenSSL just for adding a crypto algrorithm, and he recoment to see the

[openssl-dev] [openssl.org #4452] openssl-1.1.0-pre4: undefined symbol for solaris-x86-cc

2016-03-21 Thread Kiyoshi KANAZAWA via RT
% ../Configure solaris-x86-cc shared; make; make test also passes. Regards, --- Kiyoshi > Tried with openssl-SNAP-20160320, > but have the same result, not fixed yet. > > > Regards, > > --- Kiyoshi > > > > >> If you have the

[openssl-dev] [openssl.org #4464] UEFI/EDK2 build broken by removal of 'make files'.

2016-03-21 Thread David Woodhouse via RT
The EDK2 build was using 'make files', as follows: make files cd - function filelist () { echo '1,/# Autogenerated files list starts here/p' echo '/# Autogenerated files list ends here/,$p' echo '/# Autogenerated files list starts here/a\' while read LINE; do case

Re: [openssl-dev] [openssl.org #4422] OS X 32-bit PowerPC: blake2b.c:27: warning: integer constant is too large for 'unsigned long' type

2016-03-21 Thread Andy Polyakov via RT
On 03/14/16 17:12, Andy Polyakov via RT wrote: >> It looks like the ULL suffix should be safe today; > > This is misleading statement. *Today* U suffix should be safe, because > standard specifies that compiler should pick type automatically > depending on value of the constant. In order words

[openssl-dev] [openssl.org #4463] Undefined behavior in cast/c_enc.c

2016-03-21 Thread noloa...@gmail.com via RT
$ ./config -fsanitize=undefined ... $ make test HARNESS_VERBOSE=yes ... ../test/recipes/05-test_cast.t 1..1 crypto/cast/c_enc.c:78:5: runtime error: shift exponent 32 is too large for 32-bit type 'unsigned int' crypto/cast/c_enc.c:111:5: runtime error: shift exponent 32 is too large

[openssl-dev] [openssl.org #4459] openssl-1.1.0-pre4: make install fals on solaris64-x86_64-gcc.

2016-03-21 Thread Kiyoshi KANAZAWA via RT
Thank you, Richard. Make install succeeded with your new patch. --- Kiyoshi > My earlier patch was incorrect, it introduced another syntax error. Try this > one instead. > > -- > Richard Levitte > levi...@openssl.org -- Ticket here:

Re: [openssl-dev] Is a "no next protocol negotiation" (no-npn) a supported option?

2016-03-21 Thread Michel
Hi Jeff, Just for information, I send a patch and had a previous exchange about this with Rich : http://openssl.6102.n7.nabble.com/openssl-org-4178-patch-OpenSSL-1-1-0-fails-when-configure-with-no-nextproto-td61662.html Regards, Michel. -Message d'origine- De : openssl-dev

Re: [openssl-dev] Is a "no next protocol negotiation" (no-npn) a supported option?

2016-03-21 Thread Jeffrey Walton
On Mon, Mar 21, 2016 at 4:02 AM, Richard Levitte wrote: > Yes, there is such a configuration option: no-nextprotoneg > Thank you very much. That leads to: gcc -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_THREADS -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_IA32_SSE2

[openssl-dev] [openssl.org #4459] openssl-1.1.0-pre4: make install fals on solaris64-x86_64-gcc.

2016-03-21 Thread Richard Levitte via RT
My earlier patch was incorrect, it introduced another syntax error. Try this one instead. -- Richard Levitte levi...@openssl.org -- Ticket here: http://rt.openssl.org/Ticket/Display.html?id=4459 Please log in as guest with password guest if prompted diff --git

Re: [openssl-dev] Is a "no next protocol negotiation" (no-npn) a supported option?

2016-03-21 Thread Richard Levitte
Yes, there is such a configuration option: no-nextprotoneg In message

Re: [openssl-dev] 1.1.0-pre5-dev (2016-03-20) v. VMS

2016-03-21 Thread Richard Levitte
In message <16032022082387_20214...@antinode.info> on Sun, 20 Mar 2016 22:08:23 -0500 (CDT), "Steven M. Schweda" said: sms>1. An attempt to build on VMS Alpha V8.4 died when MMS choked on a sms> too-long command: sms> sms> [...] sms> PURGE [.crypto.evp]digest.OBJ sms>

Re: [openssl-dev] [openssl.org #4461] No rule to make target 'crypto/include/internal/blake2_locl.h'

2016-03-21 Thread Richard Levitte
In message on Sun, 20 Mar 2016 21:35:16 -0400, Jeffrey Walton said: noloader> On Sun, Mar 20, 2016 at 9:29 PM, Salz, Rich via RT wrote: noloader> > noloader> >> $ make depend && make

[openssl-dev] [openssl.org #4459] openssl-1.1.0-pre4: make install fals on solaris64-x86_64-gcc.

2016-03-21 Thread Richard Levitte via RT
Guys, you're on the wrong track. The shell checks the syntax of the whole line (that is, all those lines concatenated together) before any execution, so if $(ENGINES) is empty, for 'for e in $(ENGINES)' part will have an empty list no matter what, since $(ENGINES) is expanded by make, before the