OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to imap.gmail.com:993

2021-08-24 Thread Hongyi Zhao
I'm on Ubuntu 20.04.2 LTS, and test Gmail using the IMAP protocol as follows: ``` $ curl -vx socks5h://127.0.0.1:18889 --ssl imaps://imap.gmail.com:993 --user "hszhao.cn:passwd" * Trying 127.0.0.1:18889... * TCP_NODELAY set * SOCKS5 communication to imap.gmail.com:993 * SOCKS5 connect to imap.gm

Re: OpenSSL RSA blinding assumes Euler to derive e?

2021-08-24 Thread Viktor Dukhovni
On Tue, Aug 24, 2021 at 05:03:35PM +0200, Me Self wrote: > When rsa_crpt.c needs to do blinding of the exponent d and doesn't have the > exponent e, it calculates e from d using Euler's phi function (function > rsa_get_public_exp). But what if the original exponents e and d were > generated using

OpenSSL RSA blinding assumes Euler to derive e?

2021-08-24 Thread Me Self
Hi All When rsa_crpt.c needs to do blinding of the exponent d and doesn't have the exponent e, it calculates e from d using Euler's phi function (function rsa_get_public_exp). But what if the original exponents e and d were generated using Carmichaels lambda function instead of Euler like the ietf

OpenSSL Security Advisory

2021-08-24 Thread Matt Caswell
any kind. The impact of these issues on OpenSSL 1.1.0 has not been analysed. Users of these versions should upgrade to OpenSSL 1.1.1. References == URL for this Security Advisory: https://www.openssl.org/news/secadv/20210824.txt Note: the online version of the advisory may be updated with add

OpenSSL version 1.1.1l published

2021-08-24 Thread Matt Caswell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 OpenSSL version 1.1.1l released === OpenSSL - The Open Source toolkit for SSL/TLS https://www.openssl.org/ The OpenSSL project team is pleased to announce the release of version 1.1.1l of our open sour

Re: 3.0.0. IMPLEMENT_ASN1_FUNCTIONS missing _it prototypes

2021-08-24 Thread Richard Levitte
Not sure why it's 3.0.0 only... however, this looks like the usual "you define, so you must declare it first". There are a number of declaration macros for our ASN.1 templates, in this case, I believe that this is what you're looking for: DECLARE_ASN1_ITEM(TPM_PARTIAL_CERT_VALIDITY) Cheers,

Re: 3.0.0. IMPLEMENT_ASN1_FUNCTIONS missing _it prototypes

2021-08-24 Thread Matt Caswell
On 23/08/2021 20:42, Ken Goldman wrote: I get warnings on all my ASN1_SEQUENCE_END, a missing prototype for the _it functions. The code is working, but I'd like a clean compile. 3.0.0 only, 1.0.2 and 1.1.1 are OK. Example: #include #include #include #include typedef struct {     ASN1

Re: x509v3-sign-rsa, x509v3-ssh-rsa and x509v3-rsa2048-sha256

2021-08-24 Thread Dirk-Willem van Gulik
On 24 Aug 2021, at 09:47, murugesh pitchaiah wrote: > > Hi, > > I am working on generating the x509v3 certificates for ssh user. I see > with the default_md as 'sha256', in openssl.cnf file, the > key/certificate is generated with algorithm type as 'x509v3-sign-rsa'. > > I see its signature al

x509v3-sign-rsa, x509v3-ssh-rsa and x509v3-rsa2048-sha256

2021-08-24 Thread murugesh pitchaiah
Hi, I am working on generating the x509v3 certificates for ssh user. I see with the default_md as 'sha256', in openssl.cnf file, the key/certificate is generated with algorithm type as 'x509v3-sign-rsa'. I see its signature algorithm is : Signature Algorithm: sha256WithRSAEncryption