Re: [openssl-dev] OpenSSL version 1.1.0 pre release 3 published

2016-02-16 Thread Viktor Dukhovni
On Tue, Feb 16, 2016 at 11:06:32PM +, Howard Chu wrote: > >I[t] must do nothing. That's what auto-initialization is for. It is > >wrong for libraries to initialize OpenSSL, because that can't be > >done safely. So in libraries that use OpenSSL, no OpenSSL initialization, > >and no cleanup.

Re: [openssl-dev] OpenSSL version 1.1.0 pre release 3 published

2016-02-16 Thread Howard Chu
Viktor Dukhovni wrote: On Feb 16, 2016, at 11:17 AM, David Woodhouse wrote: If a library (or loadable plugin within an application) uses OpenSSL, how should it clean up after itself? I must do nothing. That's what auto-initialization is for. It is wrong for libraries to initialize OpenSSL

Re: [openssl-dev] OpenSSL version 1.1.0 pre release 3 published

2016-02-16 Thread Jouni Malinen
On Mon, Feb 15, 2016 at 10:17:15PM +, Matt Caswell wrote: > Maybe EVP_cleanup() and other similar explicit deinit functions should > be deprecated, and do nothing in 1.1.0? The auto-deinit capability > should handle it. That way you would not need to do anything "special" > for 1.1.0 with "#if

Re: [openssl-dev] OpenSSL version 1.1.0 pre release 3 published

2016-02-16 Thread Matt Caswell
On 16/02/16 16:17, David Woodhouse wrote: > On Mon, 2016-02-15 at 22:17 +, Matt Caswell wrote: >> >> Maybe EVP_cleanup() and other similar explicit deinit functions should >> be deprecated, and do nothing in 1.1.0? The auto-deinit capability >> should handle it. That way you would not need to

Re: [openssl-dev] OpenSSL version 1.1.0 pre release 3 published

2016-02-16 Thread Viktor Dukhovni
> On Feb 16, 2016, at 11:17 AM, David Woodhouse wrote: > > If a library (or loadable plugin within an application) uses OpenSSL, > how should it clean up after itself? I must do nothing. That's what auto-initialization is for. It is wrong for libraries to initialize OpenSSL, because that can'

Re: [openssl-dev] OpenSSL version 1.1.0 pre release 3 published

2016-02-16 Thread David Woodhouse
On Mon, 2016-02-15 at 22:17 +, Matt Caswell wrote: > > Maybe EVP_cleanup() and other similar explicit deinit functions should > be deprecated, and do nothing in 1.1.0? The auto-deinit capability > should handle it. That way you would not need to do anything "special" > for 1.1.0 with "#ifdef"

Re: [openssl-dev] OpenSSL version 1.1.0 pre release 3 published

2016-02-16 Thread Tomas Mraz
On Po, 2016-02-15 at 22:17 +, Matt Caswell wrote: > > On 15/02/16 21:50, Jouni Malinen wrote: > > On Mon, Feb 15, 2016 at 09:34:33PM +, Matt Caswell wrote: > > > On 15/02/16 21:25, Jouni Malinen wrote: > > > > Is this change in OpenSSL behavior expected? Is it not allowed > > > > to call >

Re: [openssl-dev] OpenSSL version 1.1.0 pre release 3 published

2016-02-15 Thread Matt Caswell
On 15/02/16 21:50, Jouni Malinen wrote: > On Mon, Feb 15, 2016 at 09:34:33PM +, Matt Caswell wrote: >> On 15/02/16 21:25, Jouni Malinen wrote: >>> Is this change in OpenSSL behavior expected? Is it not allowed to call >>> EVP_cleanup() and then re-initialize OpenSSL digests with >>> SSL_libra

Re: [openssl-dev] OpenSSL version 1.1.0 pre release 3 published

2016-02-15 Thread Jouni Malinen
On Mon, Feb 15, 2016 at 09:34:33PM +, Matt Caswell wrote: > On 15/02/16 21:25, Jouni Malinen wrote: > > Is this change in OpenSSL behavior expected? Is it not allowed to call > > EVP_cleanup() and then re-initialize OpenSSL digests with > > SSL_library_init()? > > Correct, you cannot reinit on

Re: [openssl-dev] OpenSSL version 1.1.0 pre release 3 published

2016-02-15 Thread Matt Caswell
On 15/02/16 21:25, Jouni Malinen wrote: > On Mon, Feb 15, 2016 at 10:52:27PM +0200, Jouni Malinen wrote: >> On Mon, Feb 15, 2016 at 07:04:20PM +, OpenSSL wrote: >>>OpenSSL version 1.1.0 pre release 3 (alpha) > >> It looks like something in pre release 3 has changed behavior in a way >> t

Re: [openssl-dev] OpenSSL version 1.1.0 pre release 3 published

2016-02-15 Thread Jouni Malinen
On Mon, Feb 15, 2016 at 10:52:27PM +0200, Jouni Malinen wrote: > On Mon, Feb 15, 2016 at 07:04:20PM +, OpenSSL wrote: > >OpenSSL version 1.1.0 pre release 3 (alpha) > It looks like something in pre release 3 has changed behavior in a way > that results in SSL_CTX_new(SSLv23_method()) faili

Re: [openssl-dev] OpenSSL version 1.1.0 pre release 3 published

2016-02-15 Thread Matt Caswell
On 15/02/16 20:52, Jouni Malinen wrote: > On Mon, Feb 15, 2016 at 07:04:20PM +, OpenSSL wrote: >>OpenSSL version 1.1.0 pre release 3 (alpha) >> >>OpenSSL 1.1.0 is currently in alpha. OpenSSL 1.1.0 pre release 3 has now >>been made available. For details of changes and known issues

Re: [openssl-dev] OpenSSL version 1.1.0 pre release 3 published

2016-02-15 Thread Jouni Malinen
On Mon, Feb 15, 2016 at 07:04:20PM +, OpenSSL wrote: >OpenSSL version 1.1.0 pre release 3 (alpha) > >OpenSSL 1.1.0 is currently in alpha. OpenSSL 1.1.0 pre release 3 has now >been made available. For details of changes and known issues see the >release notes at: > > ht

[openssl-dev] OpenSSL version 1.1.0 pre release 3 published

2016-02-15 Thread OpenSSL
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 1.1.0 pre release 3 (alpha) === OpenSSL - The Open Source toolkit for SSL/TLS http://www.openssl.org/ OpenSSL 1.1.0 is currently in alpha. OpenSSL 1.1.0 pre release 3 has now