Hi,
  Sorry for two messages so quickly... Anyway the problem was
my use of underscores in the cipher list.

SSL_CTX_set_cipher_list(impl_->ctx_,"EXP-RC4-MD5:RC4-MD5:RC4-SHA:EXP-RC2-CBC-MD5:IDEA-CBC_MD5:EXP-DES-CBC-SHA:DES-CBC-SHA:DES-CBC3-SHA")
 

This works fine.  I think that this is a bug in SSLeay all the same,
since by putting underscores in the cipher list string shouldn't
cause a core-dump.

The problem is the following:

in ssl_ciph.c:387

                        while ( ((ch >= 'A') && (ch <= 'Z')) ||
                                ((ch >= '0') && (ch <= '9')) ||
                                ((ch >= 'a') && (ch <= 'z')) ||
                                 (ch == '-'))

this doesn't accept underscores and current_x is then incremented.
There should probably be a check after the loop where num_x is
set to current_x that current_x doesn't exceed the number
of expected elements (which is counted above).

Matthew
-- 
Matthew Newhook                         E-Mail: mailto:[EMAIL PROTECTED]
Software Designer                       WWW:    http://www.ooc.com
Object Oriented Concepts, Inc.          Phone:  (978) 439 9285 x 246
+-------------------------------------------------------------------------+
| Administrative requests should be sent to [EMAIL PROTECTED] |
| List service provided by Open Software Associates, http://www.osa.com/  |
+-------------------------------------------------------------------------+

Reply via email to