[openssl-dev] [openssl.org #1852] Invalid Proxy Certificates Pass Validation

2016-06-29 Thread Richard Levitte via RT
On Wed Jun 29 21:16:31 2016, levitte wrote: > On Mon Jun 20 19:37:41 2016, levitte wrote: > > On Tue Feb 02 01:44:47 2016, openssl-dev@openssl.org wrote: > > > On Mon, Feb 01, 2016 at 07:18:04PM +, Rich Salz via RT wrote: > > > > > > > This is reported against 0.9.x; please open a new ticket

[openssl-dev] A faster addition chain for use in P-256 inversion mod n

2016-06-29 Thread Brian Smith
Hi, I saw Vlad Krasnov's patch to optimize inversion mod n for the P-256 curve. Please see [1], which presents an addition chain that uses 9 fewer multiplications (but two more squarings, IIRC). I spent some non-trivial effort to optimize this chain, but I wouldn't be surprised to see somebody

[openssl-dev] [openssl.org #4598] OpenSSL fails to Configure on Windows 10

2016-06-29 Thread Richard Levitte via RT
This has nothing to do with Windows 10 per se, it's the space-in-directory issue that's come back. I'm working on a solution that should avoid that problem more consistently, going forward. Cheers, Richard On Wed Jun 29 09:04:12 2016, noloa...@gmail.com wrote: > Working on a Windows 10, 32-bit

[openssl-dev] [openssl.org #1852] Invalid Proxy Certificates Pass Validation

2016-06-29 Thread Richard Levitte via RT
On Mon Jun 20 19:37:41 2016, levitte wrote: > On Tue Feb 02 01:44:47 2016, openssl-dev@openssl.org wrote: > > On Mon, Feb 01, 2016 at 07:18:04PM +, Rich Salz via RT wrote: > > > > > This is reported against 0.9.x; please open a new ticket if still a > > > problem > > > with current releases. >

Re: [openssl-dev] CVE-2016-2177

2016-06-29 Thread Salz, Rich
No, just do it. -- Senior Architect, Akamai Technologies IM: richs...@jabber.at Twitter: RichSalz > -Original Message- > From: Philip Bellino [mailto:pbell...@mrv.com] > Sent: Wednesday, June 29, 2016 3:00 PM > To: openssl-dev@openssl.org > Subject: Re: [openssl-dev] CVE-2016-2177 >

Re: [openssl-dev] build issue with openssl 1.1.0-pre5

2016-06-29 Thread Matt Caswell
On 29/06/16 15:35, Jan Just Keijser wrote: > hi all, > > I'm the maintainer of grid-proxy-verify, a grid-tool that uses "plain" > openssl to verify a grid proxy (either RFC3820 or legacy Globus proxy). > This tool > http://www.nikhef.nl/~janjust/proxy-verify/ > and >

[openssl-dev] [openssl.org #4600] Core dump when using -keymatexport and receiving a handshake alert

2016-06-29 Thread Hubert Kario via RT
when s_client receives alert during handshake and is configured to export keying material, it will crash with a segmentation fault current 1.0.2 and master are affected reproducer: openssl s_client -keymatexport EXPORT-label -connect google.com:443 -cipher IDEA Result: CONNECTED(0003)

[openssl-dev] build issue with openssl 1.1.0-pre5

2016-06-29 Thread Jan Just Keijser
hi all, I'm the maintainer of grid-proxy-verify, a grid-tool that uses "plain" openssl to verify a grid proxy (either RFC3820 or legacy Globus proxy). This tool http://www.nikhef.nl/~janjust/proxy-verify/ and http://www.nikhef.nl/~janjust/proxy-verify/grid-proxy-verify.c builds without

[openssl-dev] [openssl.org #4594] openssl s_client issue on windows platform

2016-06-29 Thread Rich Salz via RT
Duplicate of RT 3464 -- Ticket here: http://rt.openssl.org/Ticket/Display.html?id=4594 Please log in as guest with password guest if prompted -- openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

[openssl-dev] [openssl.org #4598] OpenSSL fails to Configure on Windows 10

2016-06-29 Thread noloa...@gmail.com via RT
Working on a Windows 10, 32-bit netbook. HEAD, 03cb37acec0c23a01bee4357cd59ec9f97e528ba. It looks like configure dies if it can't find NASM. Perhpas it would be better to automatically add no-asm. Once NASM is added, Configure dies because it tries to write outside %HOME%. Windows 8 used to

Re: [openssl-dev] [openssl.org #4589] Resolved: simplifying writing code that is 1.0.x and 1.1.x compatible

2016-06-29 Thread Matt Caswell via RT
On 29/06/16 08:33, Tomas Mraz via RT wrote: > On Út, 2016-06-28 at 22:10 +, Thomas Waldmann via RT wrote: >> On 06/28/2016 11:18 PM, Kurt Roeckx via RT wrote: >>> >>> On Mon, Jun 27, 2016 at 08:50:43PM +, Thomas Waldmann via RT >>> wrote: I didn't ask where to get the missing

Re: [openssl-dev] [openssl.org #4589] Resolved: simplifying writing code that is 1.0.x and 1.1.x compatible

2016-06-29 Thread Tomas Mraz via RT
On Út, 2016-06-28 at 22:10 +, Thomas Waldmann via RT wrote: > On 06/28/2016 11:18 PM, Kurt Roeckx via RT wrote: > > > > On Mon, Jun 27, 2016 at 08:50:43PM +, Thomas Waldmann via RT > > wrote: > > > > > > I didn't ask where to get the missing code from, I asked whether > > > you > > >

Re: [openssl-dev] [openssl.org #4589] Resolved: simplifying writing code that is 1.0.x and 1.1.x compatible

2016-06-29 Thread Tomas Mraz
On Út, 2016-06-28 at 22:10 +, Thomas Waldmann via RT wrote: > On 06/28/2016 11:18 PM, Kurt Roeckx via RT wrote: > > > > On Mon, Jun 27, 2016 at 08:50:43PM +, Thomas Waldmann via RT > > wrote: > > > > > > I didn't ask where to get the missing code from, I asked whether > > > you > > >

Re: [openssl-dev] Feedback on BIO API changes in 1.1

2016-06-29 Thread Matt Caswell
On 27/06/16 21:56, Timothy B. Terriberry wrote: > Because I am writing a library, which I > intend to be re-entrant, but which does not have any explicit threading > support (or dependencies), I don't have any convenient global place to > cache it. I haven't needed one for anything else. You