Re: [openssl.org #2751] [ENHANCEMENT] Request moving static get_issuer_sk before X509_verify_cert

2012-03-10 Thread Kevin Vargo
- Original Message - > From: Stephen Henson via RT > To: var...@yahoo.com > Cc: openssl-dev@openssl.org > Sent: Saturday, March 3, 2012 8:31 AM > Subject: [openssl.org #2751] [ENHANCEMENT] Request moving static > get_issuer_sk before X509_verify_cert > >>  [var...@yahoo.com - Sat Mar 03

Re: [openssl.org #2751] [ENHANCEMENT] Request moving static get_issuer_sk before X509_verify_cert

2012-03-09 Thread Kevin Vargo via RT
- Original Message - > From: Stephen Henson via RT > To: var...@yahoo.com > Cc: openssl-dev@openssl.org > Sent: Saturday, March 3, 2012 8:31 AM > Subject: [openssl.org #2751] [ENHANCEMENT] Request moving static > get_issuer_sk before X509_verify_cert > >>  [var...@yahoo.com - Sat Mar 03

[openssl.org #2751] [ENHANCEMENT] Request moving static get_issuer_sk before X509_verify_cert

2012-03-03 Thread Kevin Vargo via RT
I'd like to request moving the static function get_issuer_sk higher in the x509_vf.c file, to permit it's use by other functions in the file, such as:   int X509_verify_cert(X509_STORE_CTX *ctx) Attached is the patch that simply moves the function's declaration higher up in the file. I'll submi

[openssl.org #2750] [BUG] spec file doesn't properly build for lib64

2012-03-03 Thread Kevin Vargo via RT
Some minor updates to the openssl.spec: wrapping ifarch around the various lib dirs to get the right files in the right places. See attached diff Some minor updates to the openssl.spec: wrapping ifarch around the various lib dirs to get the right files in the right places.See attached diff ope

Re: [openssl.org #2700] BUG: v1.0.0 / openssl verify no longer works with -CApath

2012-01-31 Thread Kevin Vargo
Hi Steve,   You're correct:  it's just an issue of the new hash form.  My apologies; I thought I'd checked the hash output, but I must've gotten mixed up.  It works fine with the proper hash-links in place. Kevin > > From: Stephen Henson via RT >To: var...@ya

Re: [openssl.org #2700] BUG: v1.0.0 / openssl verify no longer works with -CApath

2012-01-31 Thread Kevin Vargo via RT
Hi Steve,   You're correct:  it's just an issue of the new hash form.  My apologies; I thought I'd checked the hash output, but I must've gotten mixed up.  It works fine with the proper hash-links in place. Kevin > > From: Stephen Henson via RT >To: var...@ya

[openssl.org #2700] BUG: v1.0.0 / openssl verify no longer works with -CApath

2012-01-31 Thread Kevin Vargo via RT
Hi,   This is a bug report against v1.0.0: openssl verify no longer works with -CApath.  `cat'ing the contents of -CApath into a file and using -CAfile does still work: With a properly configured CApath: $ ls ./trust_root/ DoD_Root_CA_2.pem DOD_Bundle.pem DOD-Email-CA-24.pem.cer ffb07f59.0 -> D