[openssl.org #451] SX6 port

2014-06-28 Thread Rich Salz via RT
Old, unsupported release. Old, unsupported operating system. :)

__
OpenSSL Project http://www.openssl.org
Development Mailing List   openssl-dev@openssl.org
Automated List Manager   majord...@openssl.org


Re: [openssl.org #451] SX6 port

2003-02-13 Thread Wendy Palm


Stephen Henson via RT wrote:


[[EMAIL PROTECTED] - Sat Feb  1 00:59:01 2003]:



$ ./openssl req -x509 -new -nodes -out sscert.pem -rand /tmp/somefile
Generating a 1024 bit RSA private key
++
..++
writing new private key to 'privkey.pem'
-
You are about to be asked to enter information that will be
incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or
a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-
Country Name (2 letter code) [AU]:
State or Province Name (full name) [Some-State]:
Locality Name (eg, city) []:
Organization Name (eg, company) [Internet Widgits Pty Ltd]:
Organizational Unit Name (eg, section) []:
Common Name (eg, YOUR name) []:
Email Address []:





OK so that seems to work. Maybe its just when x509 does it.

Can you try: 

openssl req -new -nodes -out req.pem -rand /tmp/somefile


$ ./openssl req -new -nodes -out req.pem -rand /tmp/somefile

Generating a 1024 bit RSA private key
++
..++
writing new private key to 'privkey.pem'
-
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-
Country Name (2 letter code) [AU]:State or Province Name (full name) [Some-State]:
Locality Name (eg, city) []:
Organization Name (eg, company) [Internet Widgits Pty Ltd]:
Organizational Unit Name (eg, section) []:
Common Name (eg, YOUR name) []:
Email Address []:

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:




then 

openssl x509 -req -in req.pem -out sscert.pem -signkey privkey.pem


$ ./openssl x509 -req -in req.pem -out sscert.pem -signkey privkey.pem

Signature ok
subject=/C=AU/ST=Some-State/O=Internet Widgits Pty Ltd/CN=Eric the Young
core dumping
Bus error (core dumped)



if that second command dumps core then a stack trace under a debugger
would help a lot.



will have to wait a bit.  i've never done that before and it's hiding the #$%!
core file.  i'll forward another email when i have one for you.




--
wendy palm
Cray OS Sustaining Engineering, Cray Inc.
[EMAIL PROTECTED], 651-605-9154
__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: [openssl.org #451] SX6 port

2003-02-13 Thread Wendy Palm
how's this?

*  0 getrn(lh = 0x000404092290, data = 0x00040409d930, rhash = 0x00801a40), line 430 in lhash.c
   1 lh_insert(lh = 0x000404092290, data = 0x00040409d930), line 189 in lhash.c
   2 OBJ_add_object(obj = 0x000404088a00), line 253 in obj_dat.c
   3 OBJ_create(oid = 0x40400c990 2.9.3, sn = 0x40400c9a0 SET.ex3, ln = 0x40400c9b0 SET x509v3 extension 3), line 660 in obj_dat.c
   4 x509_main(argc = 0, argv = 0x00800278), line 621 in x509.c
   5 do_cmd(prog = 0x00040408e120, argc = 8, argv = 0x00800238), line 379 in openssl.c
   6 main(Argc = 8, Argv = 0x00800238), line 298 in openssl.c
   7 _start(0x8, 0x800238, 0x800280) at 0x4057c


Stephen Henson via RT wrote:


[[EMAIL PROTECTED] - Sat Feb  1 00:59:01 2003]:



$ ./openssl req -x509 -new -nodes -out sscert.pem -rand /tmp/somefile
Generating a 1024 bit RSA private key
++
..++
writing new private key to 'privkey.pem'
-
You are about to be asked to enter information that will be
incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or
a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-
Country Name (2 letter code) [AU]:
State or Province Name (full name) [Some-State]:
Locality Name (eg, city) []:
Organization Name (eg, company) [Internet Widgits Pty Ltd]:
Organizational Unit Name (eg, section) []:
Common Name (eg, YOUR name) []:
Email Address []:





OK so that seems to work. Maybe its just when x509 does it.

Can you try: 

openssl req -new -nodes -out req.pem -rand /tmp/somefile

then 

openssl x509 -req -in req.pem -out sscert.pem -signkey privkey.pem

if that second command dumps core then a stack trace under a debugger
would help a lot.

Thanks, Steve.




--
wendy palm
Cray OS Sustaining Engineering, Cray Inc.
[EMAIL PROTECTED], 651-605-9154
__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: [openssl.org #451] SX6 port

2003-02-13 Thread Wendy Palm
i forgot to add-

dbx's message says:

SIGSEGV (absentee space fault) in getrn at line 430 in file lhash.c
couldn't read lhash.c

Wendy Palm wrote:


how's this?

*  0 getrn(lh = 0x000404092290, data = 0x00040409d930, rhash = 
0x00801a40), line 430 in lhash.c
   1 lh_insert(lh = 0x000404092290, data = 0x00040409d930), line 
189 in lhash.c
   2 OBJ_add_object(obj = 0x000404088a00), line 253 in obj_dat.c
   3 OBJ_create(oid = 0x40400c990 2.9.3, sn = 0x40400c9a0 
SET.ex3, ln = 0x40400c9b0 SET x509v3 extension 3), line 660 in 
obj_dat.c
   4 x509_main(argc = 0, argv = 0x00800278), line 621 in x509.c
   5 do_cmd(prog = 0x00040408e120, argc = 8, argv = 
0x00800238), line 379 in openssl.c
   6 main(Argc = 8, Argv = 0x00800238), line 298 in openssl.c
   7 _start(0x8, 0x800238, 0x800280) at 0x4057c


Stephen Henson via RT wrote:

[[EMAIL PROTECTED] - Sat Feb  1 00:59:01 2003]:



$ ./openssl req -x509 -new -nodes -out sscert.pem -rand /tmp/somefile
Generating a 1024 bit RSA private key
++
..++
writing new private key to 'privkey.pem'
-
You are about to be asked to enter information that will be
incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or
a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-
Country Name (2 letter code) [AU]:
State or Province Name (full name) [Some-State]:
Locality Name (eg, city) []:
Organization Name (eg, company) [Internet Widgits Pty Ltd]:
Organizational Unit Name (eg, section) []:
Common Name (eg, YOUR name) []:
Email Address []:





OK so that seems to work. Maybe its just when x509 does it.

Can you try:
openssl req -new -nodes -out req.pem -rand /tmp/somefile

then
openssl x509 -req -in req.pem -out sscert.pem -signkey privkey.pem

if that second command dumps core then a stack trace under a debugger
would help a lot.

Thanks, Steve.








--
wendy palm
Cray OS Sustaining Engineering, Cray Inc.
[EMAIL PROTECTED], 651-605-9154
__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



[openssl.org #451] SX6 port

2003-02-03 Thread Stephen Henson via RT

[[EMAIL PROTECTED] - Sat Feb  1 00:59:01 2003]:

 $ ./openssl req -x509 -new -nodes -out sscert.pem -rand /tmp/somefile
 Generating a 1024 bit RSA private key
 ++
 ..++
 writing new private key to 'privkey.pem'
 -
 You are about to be asked to enter information that will be
 incorporated
 into your certificate request.
 What you are about to enter is what is called a Distinguished Name or
 a DN.
 There are quite a few fields but you can leave some blank
 For some fields there will be a default value,
 If you enter '.', the field will be left blank.
 -
 Country Name (2 letter code) [AU]:
 State or Province Name (full name) [Some-State]:
 Locality Name (eg, city) []:
 Organization Name (eg, company) [Internet Widgits Pty Ltd]:
 Organizational Unit Name (eg, section) []:
 Common Name (eg, YOUR name) []:
 Email Address []:
 
 

OK so that seems to work. Maybe its just when x509 does it.

Can you try: 

openssl req -new -nodes -out req.pem -rand /tmp/somefile

then 

openssl x509 -req -in req.pem -out sscert.pem -signkey privkey.pem

if that second command dumps core then a stack trace under a debugger
would help a lot.

Thanks, Steve.


__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: [openssl.org #451] SX6 port

2003-02-03 Thread Wendy Palm via RT



Stephen Henson via RT wrote:

 [[EMAIL PROTECTED] - Sat Feb  1 00:59:01 2003]:
 
 
$ ./openssl req -x509 -new -nodes -out sscert.pem -rand /tmp/somefile
Generating a 1024 bit RSA private key
++
..++
writing new private key to 'privkey.pem'
-
You are about to be asked to enter information that will be
incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or
a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-
Country Name (2 letter code) [AU]:
State or Province Name (full name) [Some-State]:
Locality Name (eg, city) []:
Organization Name (eg, company) [Internet Widgits Pty Ltd]:
Organizational Unit Name (eg, section) []:
Common Name (eg, YOUR name) []:
Email Address []:



 
 OK so that seems to work. Maybe its just when x509 does it.
 
 Can you try: 
 
 openssl req -new -nodes -out req.pem -rand /tmp/somefile


$ ./openssl req -new -nodes -out req.pem -rand /tmp/somefile

Generating a 1024 bit RSA private key
++
..++
writing new private key to 'privkey.pem'
-
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-
Country Name (2 letter code) [AU]:State or Province Name (full name) [Some-State]:
Locality Name (eg, city) []:
Organization Name (eg, company) [Internet Widgits Pty Ltd]:
Organizational Unit Name (eg, section) []:
Common Name (eg, YOUR name) []:
Email Address []:

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:


 
 then 
 
 openssl x509 -req -in req.pem -out sscert.pem -signkey privkey.pem


$ ./openssl x509 -req -in req.pem -out sscert.pem -signkey privkey.pem

Signature ok
subject=/C=AU/ST=Some-State/O=Internet Widgits Pty Ltd/CN=Eric the Young
core dumping
Bus error (core dumped)


 if that second command dumps core then a stack trace under a debugger
 would help a lot.


will have to wait a bit.  i've never done that before and it's hiding the #$%!
core file.  i'll forward another email when i have one for you.




-- 
wendy palm
Cray OS Sustaining Engineering, Cray Inc.
[EMAIL PROTECTED], 651-605-9154

__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: [openssl.org #451] SX6 port

2003-02-03 Thread Wendy Palm via RT

how's this?

*  0 getrn(lh = 0x000404092290, data = 0x00040409d930, rhash = 
0x00801a40), line 430 in lhash.c
1 lh_insert(lh = 0x000404092290, data = 0x00040409d930), line 189 in 
lhash.c
2 OBJ_add_object(obj = 0x000404088a00), line 253 in obj_dat.c
3 OBJ_create(oid = 0x40400c990 2.9.3, sn = 0x40400c9a0 SET.ex3, ln = 
0x40400c9b0 SET x509v3 extension 3), line 660 in obj_dat.c
4 x509_main(argc = 0, argv = 0x00800278), line 621 in x509.c
5 do_cmd(prog = 0x00040408e120, argc = 8, argv = 0x00800238), line 379 
in openssl.c
6 main(Argc = 8, Argv = 0x00800238), line 298 in openssl.c
7 _start(0x8, 0x800238, 0x800280) at 0x4057c


Stephen Henson via RT wrote:

 [[EMAIL PROTECTED] - Sat Feb  1 00:59:01 2003]:
 
 
$ ./openssl req -x509 -new -nodes -out sscert.pem -rand /tmp/somefile
Generating a 1024 bit RSA private key
++
..++
writing new private key to 'privkey.pem'
-
You are about to be asked to enter information that will be
incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or
a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-
Country Name (2 letter code) [AU]:
State or Province Name (full name) [Some-State]:
Locality Name (eg, city) []:
Organization Name (eg, company) [Internet Widgits Pty Ltd]:
Organizational Unit Name (eg, section) []:
Common Name (eg, YOUR name) []:
Email Address []:



 
 OK so that seems to work. Maybe its just when x509 does it.
 
 Can you try: 
 
 openssl req -new -nodes -out req.pem -rand /tmp/somefile
 
 then 
 
 openssl x509 -req -in req.pem -out sscert.pem -signkey privkey.pem
 
 if that second command dumps core then a stack trace under a debugger
 would help a lot.
 
 Thanks, Steve.
 
 


-- 
wendy palm
Cray OS Sustaining Engineering, Cray Inc.
[EMAIL PROTECTED], 651-605-9154

__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: [openssl.org #451] SX6 port

2003-02-03 Thread Wendy Palm via RT

i forgot to add-

dbx's message says:

SIGSEGV (absentee space fault) in getrn at line 430 in file lhash.c
couldn't read lhash.c

Wendy Palm wrote:

 how's this?
 
 *  0 getrn(lh = 0x000404092290, data = 0x00040409d930, rhash = 
 0x00801a40), line 430 in lhash.c
1 lh_insert(lh = 0x000404092290, data = 0x00040409d930), line 
 189 in lhash.c
2 OBJ_add_object(obj = 0x000404088a00), line 253 in obj_dat.c
3 OBJ_create(oid = 0x40400c990 2.9.3, sn = 0x40400c9a0 
 SET.ex3, ln = 0x40400c9b0 SET x509v3 extension 3), line 660 in 
 obj_dat.c
4 x509_main(argc = 0, argv = 0x00800278), line 621 in x509.c
5 do_cmd(prog = 0x00040408e120, argc = 8, argv = 
 0x00800238), line 379 in openssl.c
6 main(Argc = 8, Argv = 0x00800238), line 298 in openssl.c
7 _start(0x8, 0x800238, 0x800280) at 0x4057c
 
 
 Stephen Henson via RT wrote:
 
 [[EMAIL PROTECTED] - Sat Feb  1 00:59:01 2003]:


 $ ./openssl req -x509 -new -nodes -out sscert.pem -rand /tmp/somefile
 Generating a 1024 bit RSA private key
 ++
 ..++
 writing new private key to 'privkey.pem'
 -
 You are about to be asked to enter information that will be
 incorporated
 into your certificate request.
 What you are about to enter is what is called a Distinguished Name or
 a DN.
 There are quite a few fields but you can leave some blank
 For some fields there will be a default value,
 If you enter '.', the field will be left blank.
 -
 Country Name (2 letter code) [AU]:
 State or Province Name (full name) [Some-State]:
 Locality Name (eg, city) []:
 Organization Name (eg, company) [Internet Widgits Pty Ltd]:
 Organizational Unit Name (eg, section) []:
 Common Name (eg, YOUR name) []:
 Email Address []:




 OK so that seems to work. Maybe its just when x509 does it.

 Can you try:
 openssl req -new -nodes -out req.pem -rand /tmp/somefile

 then
 openssl x509 -req -in req.pem -out sscert.pem -signkey privkey.pem

 if that second command dumps core then a stack trace under a debugger
 would help a lot.

 Thanks, Steve.


 
 


-- 
wendy palm
Cray OS Sustaining Engineering, Cray Inc.
[EMAIL PROTECTED], 651-605-9154

__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: [openssl.org #451] SX6 port

2003-01-31 Thread Wendy Palm via RT

i'm sorry for the delay in response.  i've been out of the office during the
last couple of weeks.

yes, more tests fail than i reported, but we only wanted enough openssl
to work with openssh, so once i got what i wanted, i didn't go any further
until i had more time to devote to it.

attached is the test output you requested.

Richard Levitte via RT wrote:

 Will anything happen with this?
 
 [[EMAIL PROTECTED] - Sat Jan 18 11:02:31 2003]:
 
 
I already answered this once, but it didn't come through for some
reason...


+ sx6, cc:-g -DTERMIOS::(unknown):::SIXTY_FOUR_BIT DES_INT:::,


No optimization? Not even lousy -O?

-g overrides any optimization you give,

Yes, that's what normally happens...


and i think there's a problem with
the optimizer anyway because with default optimization, aes-128-cbc

test fails.

it's fine with -g.

I wonder if AES is the only one affected. Could you run 'make -k test'
and submit output?

A.


 
 


-- 
wendy palm
Cray OS Sustaining Engineering, Cray Inc.
[EMAIL PROTECTED], 651-605-9154
__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



[openssl.org #451] SX6 port

2003-01-31 Thread Stephen Henson via RT

[[EMAIL PROTECTED] - Fri Jan 31 21:06:07 2003]:

 i'm sorry for the delay in response.  i've been out of the office
during the
 last couple of weeks.
 
 yes, more tests fail than i reported, but we only wanted enough
openssl
 to work with openssh, so once i got what i wanted, i didn't go any
further
 until i had more time to devote to it.
 
 attached is the test output you requested.
 

Hmmm... this is a bit worrying:


convert the certificate request into a self signed certificate using 'x509'
unable to load 'random state'
This means that the random number generator has not been seeded
with much random data.
Consider setting the RANDFILE environment variable to point at a file that
'random' data can be kept in (the file will be overwritten).
Signature ok
subject=/C=AU/O=Dodgy Brothers/CN=Dodgy CA
core dumping
./testss: 3837 Memory fault - core dumped
error using 'x509' to self sign a certificate request
*** Error code 1 (bu21)
--

might be related to the new ASN1 code but its not possible to be sure
from that.

__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: [openssl.org #451] SX6 port

2003-01-31 Thread Wendy Palm via RT

i'm happy to test anything you want, but crays are more my forte
and NEC just my spare time, so i can't provide much programming
help myself.

Stephen Henson via RT wrote:

 [[EMAIL PROTECTED] - Fri Jan 31 21:06:07 2003]:
 
 
i'm sorry for the delay in response.  i've been out of the office
   during the
last couple of weeks.

yes, more tests fail than i reported, but we only wanted enough
   openssl
to work with openssh, so once i got what i wanted, i didn't go any
   further
until i had more time to devote to it.

attached is the test output you requested.


 
 Hmmm... this is a bit worrying:
 
 
 convert the certificate request into a self signed certificate using 'x509'
 unable to load 'random state'
 This means that the random number generator has not been seeded
 with much random data.
 Consider setting the RANDFILE environment variable to point at a file that
 'random' data can be kept in (the file will be overwritten).
 Signature ok
 subject=/C=AU/O=Dodgy Brothers/CN=Dodgy CA
 core dumping
 ./testss: 3837 Memory fault - core dumped
 error using 'x509' to self sign a certificate request
 *** Error code 1 (bu21)
 --
 
 might be related to the new ASN1 code but its not possible to be sure
 from that.
 


-- 
wendy palm
Cray OS Sustaining Engineering, Cray Inc.
[EMAIL PROTECTED], 651-605-9154

__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



[openssl.org #451] SX6 port

2003-01-31 Thread Stephen Henson via RT

[[EMAIL PROTECTED] - Fri Jan 31 21:36:01 2003]:

 i'm happy to test anything you want, but crays are more my forte
 and NEC just my spare time, so i can't provide much programming
 help myself.
 

I don't have acess to anything like that myself so...

From that report it looks like the stuff that creates a self signed
certificate in OpenSSL is dumping core.

If you could try:

openssl req -x509 -new -nodes -out sscert.pem

(just hit return through all the prompts)

see if that crashes and then get some idea where the crash occurs with a
debugger that would help a lot.

Thanks, Steve.

__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: [openssl.org #451] SX6 port

2003-01-31 Thread Wendy Palm via RT

$ cd apps
$ ./openssl req -x509 -new -nodes -out sscert.pem

unable to load 'random state'
This means that the random number generator has not been seeded
with much random data.
Generating a 1024 bit RSA private key
8953:error:24064064:random number generator:SSLEAY_RAND_BYTES:PRNG not 
seeded:md_rand.c:503:You need to read the OpenSSL FAQ, 
http://www.openssl.org/support/faq.html
8953:error:04069003:rsa routines:RSA_generate_key:BN lib:rsa_gen.c:182:

it didn't get as far as asking any questions

Stephen Henson via RT wrote:

 [[EMAIL PROTECTED] - Fri Jan 31 21:36:01 2003]:
 
 
i'm happy to test anything you want, but crays are more my forte
and NEC just my spare time, so i can't provide much programming
help myself.


 
 I don't have acess to anything like that myself so...
 
From that report it looks like the stuff that creates a self signed
 certificate in OpenSSL is dumping core.
 
 If you could try:
 
 openssl req -x509 -new -nodes -out sscert.pem
 
 (just hit return through all the prompts)
 
 see if that crashes and then get some idea where the crash occurs with a
 debugger that would help a lot.
 
 Thanks, Steve.
 


-- 
wendy palm
Cray OS Sustaining Engineering, Cray Inc.
[EMAIL PROTECTED], 651-605-9154

__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



[openssl.org #451] SX6 port

2003-01-31 Thread Stephen Henson via RT

[[EMAIL PROTECTED] - Sat Feb  1 00:02:48 2003]:

 $ cd apps
 $ ./openssl req -x509 -new -nodes -out sscert.pem
 
 unable to load 'random state'
 This means that the random number generator has not been seeded
 with much random data.
 Generating a 1024 bit RSA private key
 8953:error:24064064:random number generator:SSLEAY_RAND_BYTES:PRNG not
 seeded:md_rand.c:503:You need to read the OpenSSL FAQ,
 http://www.openssl.org/support/faq.html
 8953:error:04069003:rsa routines:RSA_generate_key:BN
 lib:rsa_gen.c:182:
 
 it didn't get as far as asking any questions
 

OK, the PRNG doesn't get seeded. So it should get further if you try:

openssl req -x509 -new -nodes -out sscert.pem -randfile ./somefile

where somefile is a file with some random data in it, any old text
file will do for this test.

Steve.

__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: [openssl.org #451] SX6 port

2003-01-31 Thread Wendy Palm via RT

$ ./openssl req -x509 -new -nodes -out sscert.pem -rand /tmp/somefile
Generating a 1024 bit RSA private key
++
..++
writing new private key to 'privkey.pem'
-
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-
Country Name (2 letter code) [AU]:
State or Province Name (full name) [Some-State]:
Locality Name (eg, city) []:
Organization Name (eg, company) [Internet Widgits Pty Ltd]:
Organizational Unit Name (eg, section) []:
Common Name (eg, YOUR name) []:
Email Address []:



Stephen Henson via RT wrote:

 [[EMAIL PROTECTED] - Sat Feb  1 00:02:48 2003]:
 
 
$ cd apps
$ ./openssl req -x509 -new -nodes -out sscert.pem

unable to load 'random state'
This means that the random number generator has not been seeded
with much random data.
Generating a 1024 bit RSA private key
8953:error:24064064:random number generator:SSLEAY_RAND_BYTES:PRNG not
seeded:md_rand.c:503:You need to read the OpenSSL FAQ,
http://www.openssl.org/support/faq.html
8953:error:04069003:rsa routines:RSA_generate_key:BN
lib:rsa_gen.c:182:

it didn't get as far as asking any questions


 
 OK, the PRNG doesn't get seeded. So it should get further if you try:
 
 openssl req -x509 -new -nodes -out sscert.pem -randfile ./somefile
 
 where somefile is a file with some random data in it, any old text
 file will do for this test.
 
 Steve.
 


-- 
wendy palm
Cray OS Sustaining Engineering, Cray Inc.
[EMAIL PROTECTED], 651-605-9154

__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



[openssl.org #451] SX6 port

2003-01-30 Thread Richard Levitte via RT

Will anything happen with this?

[[EMAIL PROTECTED] - Sat Jan 18 11:02:31 2003]:

 I already answered this once, but it didn't come through for some
 reason...
 
  + sx6, cc:-g -DTERMIOS::(unknown):::SIXTY_FOUR_BIT DES_INT:::,
  
  
   No optimization? Not even lousy -O?
 
  -g overrides any optimization you give,
 
 Yes, that's what normally happens...
 
  and i think there's a problem with
  the optimizer anyway because with default optimization, aes-128-cbc
 test fails.
  it's fine with -g.
 
 I wonder if AES is the only one affected. Could you run 'make -k test'
 and submit output?
 
 A.
 


-- 
Richard Levitte
__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: [openssl.org #451] SX6 port

2003-01-22 Thread Wendy Palm
Andy Polyakov via RT wrote:


+ sx6, cc:-g -DTERMIOS::(unknown):::SIXTY_FOUR_BIT DES_INT:::,



No optimization? Not even lousy -O?



-g overrides any optimization you give, and i think there's a problem with
the optimizer anyway because with default optimization, aes-128-cbc test fails.
it's fine with -g.



SIXTY_FOUR_BIT? SIXTY_FOUR_BIT aims ILP32 ABIs implemented on 64-bit
CPUs, N32 ABI on IRIX 6 is one example. If your sizeof(long)==8, then
you should use SIXTY_FOUR_BIT_LONG. Please confirm.



thank you for the note.  yes, it should be SIXTY_FOUR_BIT_LONG.

wendy




--
wendy palm
Cray OS Sustaining Engineering, Cray Inc.
[EMAIL PROTECTED], 651-605-9154
__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: [openssl.org #451] SX6 port

2003-01-18 Thread Andy Polyakov via RT

I already answered this once, but it didn't come through for some
reason...

 + sx6, cc:-g -DTERMIOS::(unknown):::SIXTY_FOUR_BIT DES_INT:::,
 
 
  No optimization? Not even lousy -O?
 
 -g overrides any optimization you give,

Yes, that's what normally happens...
 
 and i think there's a problem with
 the optimizer anyway because with default optimization, aes-128-cbc test fails.
 it's fine with -g.

I wonder if AES is the only one affected. Could you run 'make -k test'
and submit output?

A.

__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: [openssl.org #451] SX6 port

2003-01-14 Thread Wendy Palm via RT

Andy Polyakov via RT wrote:

+ sx6, cc:-g -DTERMIOS::(unknown):::SIXTY_FOUR_BIT DES_INT:::,

 
 No optimization? Not even lousy -O?


-g overrides any optimization you give, and i think there's a problem with
the optimizer anyway because with default optimization, aes-128-cbc test fails.
it's fine with -g.


 SIXTY_FOUR_BIT? SIXTY_FOUR_BIT aims ILP32 ABIs implemented on 64-bit
 CPUs, N32 ABI on IRIX 6 is one example. If your sizeof(long)==8, then
 you should use SIXTY_FOUR_BIT_LONG. Please confirm.


thank you for the note.  yes, it should be SIXTY_FOUR_BIT_LONG.

wendy




-- 
wendy palm
Cray OS Sustaining Engineering, Cray Inc.
[EMAIL PROTECTED], 651-605-9154

__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: [openssl.org #451] SX6 port

2003-01-12 Thread Andy Polyakov via RT

 + sx6, cc:-g -DTERMIOS::(unknown):::SIXTY_FOUR_BIT DES_INT:::,

No optimization? Not even lousy -O?

SIXTY_FOUR_BIT? SIXTY_FOUR_BIT aims ILP32 ABIs implemented on 64-bit
CPUs, N32 ABI on IRIX 6 is one example. If your sizeof(long)==8, then
you should use SIXTY_FOUR_BIT_LONG. Please confirm.

A.

__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



[openssl.org #451] SX6 port

2003-01-11 Thread Wendy Palm via RT

Cray Inc provides support for some NEC sites, so that's why this is coming from me.

configuration patches to make openssl compile on NEC's SX-6 machines.


diff -c openssl-0.9.7.orig/config.orig openssl-0.9.7.sx6/config
*** openssl-0.9.7.orig/config.orig Fri Jan 10 17:54:08 2003
--- openssl-0.9.7.sx6/config  Fri Jan 10 17:58:25 2003
***
*** 352,357 
--- 352,361 
  echo j90-cray-unicos; exit 0;
  ;;

+ SUPER-UX*SX-6)
+echo sx6-nec-superux; exit 0;
+;;
+
   NONSTOP_KERNEL*)
  echo nsr-tandem-nsk; exit 0;
  ;;
***
*** 731,736 
--- 735,741 
 *-*-cygwin) OUT=Cygwin ;;
 t3e-cray-unicosmk) OUT=cray-t3e ;;
 j90-cray-unicos) OUT=cray-j90 ;;
+   sx6-nec-superux) OUT=sx6 ;;
 nsr-tandem-nsk) OUT=tandem-c89 ;;
 *) OUT=`echo $GUESSOS | awk -F- '{print $3}'`;;
   esac
diff -rc openssl-0.9.7.orig/Configure openssl-0.9.7.sx6/Configure
*** openssl-0.9.7.orig/ConfigureFri Dec 27 19:35:11 2002
--- openssl-0.9.7.sx6/Configure Fri Jan 10 16:58:28 2003
***
*** 468,473 
--- 468,478 
   # did not like it.
   cray-t3e, cc: -DBIT_FIELD_LIMITS -DTERMIOS::(unknown):CRAY::SIXTY_FOUR_BIT_LONG 
RC4_CHUNK DES_INT:::,

+ #
+ # NEC SX-6 (Cray Inc. [EMAIL PROTECTED])
+ #
+ sx6, cc:-g -DTERMIOS::(unknown):::SIXTY_FOUR_BIT DES_INT:::,
+
   # DGUX, 88100.
   dgux-R3-gcc,   gcc:-O3 -fomit-frame-pointer::(unknown):::RC4_INDEX 
DES_UNROLL:::,
   dgux-R4-gcc,   gcc:-O3 -fomit-frame-pointer::(unknown)::-lnsl 
-lsocket:RC4_INDEX DES_UNROLL:::,



-- 
wendy palm
Cray OS Sustaining Engineering, Cray Inc.
[EMAIL PROTECTED], 651-605-9154

__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]