Re: License for contributed Mac OS code?

2007-12-22 Thread Joshua Juran
On Dec 22, 2007, at 11:42 AM, David Schwartz wrote: I don't think the license can compel you to make a demonstrably false statement. I think such a clause would be considered unconscionable. However, if the clauses are true under any reasonable interpretation at all, then it's probably not

Re: License for contributed Mac OS code?

2007-12-21 Thread Joshua Juran
with the GNU GPL. Josh On Dec 1, 2007 5:39 PM, Joshua Juran [EMAIL PROTECTED] wrote: Hello, I'm developing a unix-like environment for traditional Mac OS, and I'd like to use Roy Wood's randomizer code (packaged in OpenSSL) to implement /dev/random. However, the code in question (Randomizer.cpp

License for contributed Mac OS code?

2007-12-01 Thread Joshua Juran
Hello, I'm developing a unix-like environment for traditional Mac OS, and I'd like to use Roy Wood's randomizer code (packaged in OpenSSL) to implement /dev/random. However, the code in question (Randomizer.cpp) contains no copyright notice or license, and my email to [EMAIL PROTECTED]

Re: SSL_library_init - missing 36 bytes after cleanup

2005-11-15 Thread Joshua Juran
On Nov 15, 2005, at 7:29 PM, Steven Reddie wrote: David, If 36 bytes are being dynamically allocated and not being freed how is it not a leak? Steven Because it only happens once. Imagine that when you shut off a faucet, water drips out for the next ten seconds and then stops. That's

Re: Reading from standard input

2005-08-29 Thread Joshua Juran
On Aug 30, 2005, at 12:00 AM, Roberto Arias Alegria wrote: Yeah I think the end of line was the key. After reading your posts I realised that I needed this: echo mytext | openssl dgst -md5 Anyway, I don't know why I got different hashes: Using openssl: echo 1122 | openssl dgst -md5

Re: Creating certs for others (without their private keys)

2005-07-03 Thread Joshua Juran
certificate which you send back to me. So yes, creating the CSR requires the private key, but the customer does that, not the CA. At least, that's my understanding; I haven't actually done this myself. Josh -- Joshua Juran Metamage Software Creations - Mac Software and Consulting http

Re: Need objective arguments against double certificate

2005-06-16 Thread Joshua Juran
. Security vulnerabilities are much more tricky and expensive to detect and the damage may happen all at once, making them very high-risk. I understand several of the OpenSSL development team are available for consulting. Josh -- Joshua Juran Metamage Software Creations - Mac Software and Consulting

Re: simple question again

2005-05-19 Thread Joshua Juran
the certificate authority. Since nobody else will see it, there's no value to having it signed, because nobody could verify the signature. And, of course, the private key is useless if disclosed. Josh -- Joshua Juran Metamage Software Creations - Mac Software and Consulting http://www.metamage.com

Re: simple question again

2005-05-18 Thread Joshua Juran
-- Joshua Juran Metamage Software Creations - Mac Software and Consulting http://www.metamage.com/ * Creation at the highest state of the art * smime.p7s Description: S/MIME cryptographic signature

Re: Using Unix Domain Sockets?

2005-04-01 Thread Joshua Juran
on this list and elsewhere. Josh -- Joshua Juran Metamage Software Creations - Mac Software and Consulting http://www.metamage.com/ * Creation at the highest state of the art * smime.p7s Description: S/MIME cryptographic signature

Re: Using Unix Domain Sockets?

2005-03-30 Thread Joshua Juran
of socket. Josh -- Joshua Juran Metamage Software Creations - Mac Software and Consulting http://www.metamage.com/ * Creation at the highest state of the art * smime.p7s Description: S/MIME cryptographic signature

Re: EVP ciphers

2004-03-28 Thread Joshua Juran
in a good text editor. The C Preprocessor is Evil. -- Bjarne Stroustrup It's much easier to spot this when you're using C++. :-) Josh -- Joshua Juran Metamage Software Creations - Mac Software and Consulting http://www.metamage.com/ * Creation at the highest state of the art

Re: RE : RAND_status always returns 1

2003-11-20 Thread Joshua Juran
requirement that the data be *unpredictable*. If an attacker can duplicate your random number source, then entropy goes to zero, no matter how random the data are. Ron Jeffries, a promoter of Extreme Programming (which advocates unit tests), has said The wages of sin is debugging. Josh -- Joshua Juran

Re: Entropy gathering on Mac OS 9?

2003-10-14 Thread Joshua Juran
OpenSSL for classic Mac OS. I added the code static CRandomizer Randomizer() { static CRandomizer randomizer; return randomizer; } extern C int RAND_poll(void) { Randomizer().PeriodicAction(); } to the file after the #include directives. Josh -- Joshua Juran Metamage Software Creations