Re: [openssl-dev] Is X509_free(NULL) ok?

2017-12-22 Thread Ken Goldman
On 12/22/2017 9:59 AM, Salz, Rich via openssl-dev wrote: I think we fixed all such cases in 1.1.0, all *_free() functions should handle NULL. I don't think we backported to changes to 1.0.2. Yes, and we fixed the documentation. I backported all/most of them to 1.0.2 to make cherry-picking easi

Re: [openssl-dev] Is X509_free(NULL) ok?

2017-12-22 Thread Ken Goldman
On 12/22/2017 9:24 AM, Salz, Rich via openssl-users wrote: if (ptr!= NULL) free(ptr); That shouldn’t be necessary for OpenSSL. If you find places where it is, please open an issue. OK. I'll mention a few, but it's a global issue. The code may handle NULL. However, conservati

Re: [openssl-dev] [TrouSerS-tech] [PATCH 1/1] add TPM2 version of create_tpm2_key and libtpm2.so engine

2017-01-10 Thread Ken Goldman
On 1/3/2017 6:22 PM, James Bottomley wrote: Note that google took an alternative approach and modified their TSS to work with a MD5-SHA1 signature: https://chromium-review.googlesource.com/#/c/420811/ But this requires a modification to the TPM as well, which we can't do. Right. It's not a

[openssl-dev] Openssl 1.1 port - hash state serializing context

2016-12-18 Thread Ken Goldman
I have a simulation of a hardware device that has the following characteristics: - does hashing functions - resource constrained - multi-user Therefore, a typical pattern is that one application starts a digest calculation, then the hash state must get swapped out for another user. In 1.0, I

[openssl-dev] Openssl 1.1 port - hash state serializing

2016-11-28 Thread Ken Goldman
There was no answer on the 'users' list, so this is perhaps now a feature request. Is there a possibility of getting this function? ~~ I have a simulation of a hardware device that has the following characteristics: - does hashing functions - resource constrained - multi-user Therefore, a

Re: [openssl-dev] FW: Website changing this weekend

2015-08-25 Thread Ken Goldman
On 8/24/2015 5:55 PM, Salz, Rich wrote: Yes, cross-refs within the manpages are still often broke. We're working on that. Do you still want lists of broken links, or is this a general issue you're already aware of. If you do, from https://www.openssl.org/docs/manmaster/crypto/evp.html t

Re: [openssl-dev] FW: Website changing this weekend

2015-08-20 Thread Ken Goldman
On 8/14/2015 4:26 PM, Salz, Rich wrote: If you notice any broken links, let us know. From the https://www.openssl.org/docs/manmaster/crypto/crypto.html page - the links to x509v3, asn1, stack and txt_db are broken. - it's unclear what "INTERNAL FUNCTIONS" means. A new reader could interpre

Re: [openssl-dev] FW: Website changing this weekend

2015-08-20 Thread Ken Goldman
On 8/14/2015 4:26 PM, Salz, Rich wrote: If you notice any broken links, let us know. There used to be a very useful link at: https://www.openssl.org/docs/crypto/ This was a simple alphabetical listing of the API. It included functions that were hidden from the main page, so it was very use

[openssl-dev] Making openssl structures opaque

2014-12-26 Thread Ken Goldman
In response to the notice that openssl will be making many structures opaque, it was suggested that I post some requirements I have for the RSA structure. I currently perform these by operating directly on the structure. I would need an API equivalent. - Generate a key pair and return n,p,q,

Re: test/heartbleed_test.c

2014-05-20 Thread Ken Goldman
On 5/20/2014 7:24 AM, Ben Laurie wrote: There is already a strndup replacement: BUF_strndup(). Switching to use that would be better. However - if that function points to strndup, don't you still have the problem if strndup doesn't exist? - if that function is a reimplementation of strndup

[openssl.org #1096] Minor documentation bugs

2005-06-03 Thread Ken Goldman via RT
e correct Posix behavior, although a Google search showed that early Linux did not do that. I suggest pthread_self() as the callback function. -- Ken Goldman [EMAIL PROTECTED] 914-784-7646 __