Re: building 32-bit openssl library on 64-bit RedHat Linux

2008-01-24 Thread G.W. Haywood
Hi there, On Thu, 24 Jan 2008, Geetanjali Sovani wrote: > I am trying to build openssl 32-bit libraries on a 64-bit RedHat Linux > x86_64 > However, the default configuration always builds it as 64-bit libraries. > I saw that there is a configuration parameter that can be used to build > 32-bit

Re: How to dump SSL Handshake messages?

2008-01-11 Thread G.W. Haywood
Hi there, On Fri, 11 Jan 2008, Vicky Ven wrote: > I need to the capture the SSL handshake messages between my client > application and server. > How do we dump detailed SSL Handshake messages? Does OpenSSL offer some > means? Depends on your platform. Try tcpdump if you have something that offe

Re: About ECC patent and OpenSSL ECC code

2008-01-11 Thread G.W. Haywood
Hi there, On Thu, 10 Jan 2008, Rodney Thayer wrote: > As far as I'm concerned... Your analysis was very helpful. Thanks very much. -- 73, Ged. __ OpenSSL Project http://www.openssl.org User Sup

OpenSSL mailing list posting guidelines.

2008-01-09 Thread G.W. Haywood
Hello all, In the absence of moderation and/or a daily digest of the OpenSSL mailing list, and in view of the rather high and apparently increasing volume(/noise level) on the list, here are some options that I can see for me, listed in order of increasing reluctance: 1. Beg for the publication o

Re: Vista 64 bit

2008-01-01 Thread G.W. Haywood
Hi there, On Mon, 31 Dec 2007, Thomas J. Hruska wrote: > If you absolutely have to have a 64-bit build (i.e. 32-bit doesn't > work), wait a few weeks. I'm planning on purchasing and installing > Microsoft Visual Studio Professional 2008 out of my own pocket (since > almost no one donates). One

Re: How To Download Latest Tarball?

2007-11-19 Thread G.W. Haywood
Hi there, On Sat, 17 Nov 2007 [EMAIL PROTECTED] wrote: > ...having problems downloading one of the *.gz tarballs on your website. > > ...upon downloading, it has been modified to a *tar.tar file - that is, > openssl-0.9.8g.tar.tar. Ugh. That's probably just Windows being stupid. > So then, I F

Re: Possible memory leak or bad allocation strategy in openssl-0.9.8d - known issue?

2007-10-19 Thread G.W. Haywood
Hi there, On Fri, 19 Oct 2007, David Lobron wrote: > I am testing an Objective-C program that links with openssl-0.9.8d, > in a Linux environment. In testing, I noticed that RSS use was > creeping up fairly quickly I don't know why that might be, but the generic advice is to try the most recent

RE: Changing the expiry date of a cert

2007-10-17 Thread G.W. Haywood
Hi there, On Wed, 17 Oct 2007, David Schwartz wrote: > The OP wrote: > > > I have a private CA certificate created using openssl command line. > > The issue is that the certificate expires on 19th Oct, 2007. > > The question is that "Is it possible to extend the expiry of this > > certificate wit

Re: SHA1 checksum mismatch on openssl-0.9.8f tarball

2007-10-13 Thread G.W. Haywood
Hi there, This seems to be going from bad to worse... mail4:~/src/openssl-0.9.8f$ >>> su Password: mail4:/home/ged/src/openssl-0.9.8f# >>> make install making all in crypto... make[1]: Entering directory `/home2/ged/src/openssl-0.9.8f/crypto' making all in crypto/objects... make[2]: Entering dire

Re: SHA1 checksum mismatch on openssl-0.9.8f tarball

2007-10-13 Thread G.W. Haywood
Hi there, On Fri, 12 Oct 2007, Keith Thompson wrote: > On Fri 07-10-12 15:02, Keith Thompson wrote: > > > That's not the only problem. [...] > > The key used to generate openssl-0.9.8f.tar.gz.asc (key ID > 2719AF35) appears to belong to Ben Laurie, who is a member of > the OpenSSL core team, but

Arbitrary code execution?

2007-10-05 Thread G.W. Haywood
Hi there, There's a notice that 0.9.7m and 0.9.8e have a vulnerability posted here: http://www.securityfocus.com/bid/25831 and the Debian package maintainer recently sent this: -- Subject: [DSA 1379-1] New openssl packages fix a