In about an hour, I'm tagging for beta 3

2000-09-21 Thread Richard Levitte - VMS Whacker
... then starts the fun :-). -- Richard Levitte \ Spannvägen 38, II \ [EMAIL PROTECTED] Chairman@Stacken \ S-168 35 BROMMA \ T: +46-8-26 52 47 Redakteur@Stacken \ SWEDEN \ or +46-709-50 36 10 Procurator Odiosus Ex Infernis-- [EMAIL PROTECTED] Member of the

Re: rewriting the ASN1

2000-09-21 Thread Michael Ströder
Jonathan Cloots wrote: If you are interested maybe you can use the IBM Jonah Implementation? Where can I download this? This is an excerpt of a PKCS7 structure implemented in the Jonah ASN1 Framework... class EXPORTCLASS EncryptedContentInfo : public asn_sequence { public:

Re: rewriting the ASN1

2000-09-21 Thread Michael Ströder
Dr S N Henson wrote: One of the trickier problems is to support all the unusual hacks and quirks in the current code to work around broken ASN1 encodings. Can you give some examples? Or even a complete list of all the work-arounds? E.g. I experienced some incompabilities of recent certs I

SSL_CTX_load_verify_locations Questions

2000-09-21 Thread arehn
Hi, I've written an HTTP client and server that uses the OpenSSL library to secure the connection. What I can't figure out is how to set up the "PKI" to make cert verification work. "SSL_CTX_load_verify_locations" would set up the location of my CA certs but do I need both the CAfile and

Re: rewriting the ASN1

2000-09-21 Thread Dr S N Henson
SCH wrote: To rewrite ASN1 code will change almost everything in openssl. the current nid--oid definig, the signing ,verifing of RSA and DSA, then the cert and request management, PKCS5,7,8,12, then the SSL handshake, the last but necessary, the demos and apps. I haven't look into the

success beta3

2000-09-21 Thread Peter Runestig (ECA)
Successfully built and tested on Win2000 Pro SP1 / VC6 SP3 / Platform SDK July -00 / nasm 0.98 OpenSSL 0.9.6-beta3 21 Sep 2000 built on: Thu Sep 21 12:06:31 2000 platform: VC-WIN32 options: bn(64,32) md2(int) rc4(idx,int) des(idx,cisc,4,long) idea(int) blowfish(idx) compiler: cl /MD

beta 3 success reports

2000-09-21 Thread Sean O'Riordain
Sun ultra-5 - Solaris 2.6, gcc 2.95.2 OpenSSL 0.9.6-beta3 21 Sep 2000 built on: Thu Sep 21 11:06:27 GMT 2000 platform: solaris-sparcv9-gcc options: bn(64,32) md2(int) rc4(ptr,char) des(idx,cisc,16,long) idea(int) blowfish(ptr) compiler: gcc -fPIC -DTHREADS -D_REENTRANT -DDSO_DLFCN

successful build beta3 linux

2000-09-21 Thread ariel
OpenSSL 0.9.6-beta3 21 Sep 2000 built on: Thu Sep 21 10:23:58 EDT 2000 platform: linux-elf options: bn(64,32) md2(int) rc4(idx,int) des(ptr,risc1,16,long) idea(int) blowfish(idx) compiler: gcc -fPIC -DTHREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer

beta 3 build failure on FreeBSD 2.2.5-RELEASE

2000-09-21 Thread Sean O'Riordain
from dmesg... FreeBSD 2.2.5-RELEASE #0: Tue Oct 21 14:33:00 GMT 1997 [EMAIL PROTECTED]:/usr/src/sys/compile/GENERIC CPU: AMD Unknown (300.68-MHz 586-class CPU) Origin = "AuthenticAMD" Id = 0x58c Stepping=12 Features=0x8021bfFPU,VME,DE,PSE,TSC,MSR,MCE,CX8,PGE It did work fine for

beta 3 success reports

2000-09-21 Thread Michael Ströder
S.u.S.E. 7.0, gcc version 2.95.2 19991024 (release) OpenSSL 0.9.6-beta3 21 Sep 2000 built on: Don Sep 21 17:08:39 CEST 2000 platform: linux-elf options: bn(64,32) md2(int) rc4(idx,int) des(ptr,risc1,16,long) idea(int) blowfish(idx) compiler: gcc -fPIC -DTHREADS -D_REENTRANT -DDSO_DLFCN

Re: beta 3 build failure on FreeBSD 2.2.5-RELEASE

2000-09-21 Thread Sean O'Riordain
Richard, that did the trick. (I just did a make clean... I'll remove everything and do it up again tomorrow morning !) OpenSSL 0.9.6-beta3 21 Sep 2000 built on: Thu Sep 21 15:09:33 GMT 2000 platform: FreeBSD options: bn(64,32) md2(int) rc4(idx,int) des(ptr,risc1,16,long) idea(int) blowfish(idx)

6 more beta3 successes (1 small issue though)

2000-09-21 Thread Peter 'Luna' Runestig
Built and tested ok: Linux i386 2.2.17 / glibc 2.1.3 / gcc 2.95.2 OpenSSL 0.9.6-beta3 21 Sep 2000 built on: Thu Sep 21 17:01:08 CEST 2000 platform: linux-elf options: bn(64,32) md2(int) rc4(idx,int) des(ptr,risc1,16,long) idea(int) blowfish(idx)

Re: 6 more beta3 successes (1 small issue though)

2000-09-21 Thread Richard Levitte - VMS Whacker
From: "Peter 'Luna' Runestig" [EMAIL PROTECTED] peter+openssl-dev gcc -I. -I../include -DTERMIOS -O3 -fomit-frame-pointer -c mem_dbg.c peter+openssl-dev cc1: warning: peter+openssl-dev *** peter+openssl-dev *** The -O3 flag TRIGGERS KNOWN OPTIMIZER BUGS ON THIS PLATFORM peter+openssl-dev ***

Re: 6 more beta3 successes (1 small issue though)

2000-09-21 Thread Peter 'Luna' Runestig
Richard Levitte - VMS Whacker wrote: From: "Peter 'Luna' Runestig" [EMAIL PROTECTED] peter+openssl-dev gcc -I. -I../include -DTERMIOS -O3 -fomit-frame-pointer -c mem_dbg.c peter+openssl-dev cc1: warning: peter+openssl-dev *** peter+openssl-dev *** The -O3 flag TRIGGERS KNOWN

openssl doc at http://www.columbia.edu/~ariel/ssleay/

2000-09-21 Thread Dan Kegel
Someone just sent me this link: http://www.columbia.edu/~ariel/ssleay/ It looks like some very helpful, if dated, documentation. Is this already included with OpenSSL and I just missed it? Might be nice to at least link to it. - Dan

Re: openssl doc at http://www.columbia.edu/~ariel/ssleay/

2000-09-21 Thread Richard Levitte - VMS Whacker
From: Dan Kegel [EMAIL PROTECTED] dank Someone just sent me this link: dank http://www.columbia.edu/~ariel/ssleay/ dank It looks like some very helpful, if dated, documentation. dank Is this already included with OpenSSL and I just missed it? dank Might be nice to at least link to it.

Bleichenbacher attack?

2000-09-21 Thread Dan Kegel
(Crypto newbie here.) How vulnerable is the current OpenSSL to the Bleichenbacher attack? Must be old hat by now, but someone brought it up at work. The source tree does not seem to contain the word 'bleichenbacher', and it's only been mentioned in passing on this list. TLS (

Re: Bleichenbacher attack?

2000-09-21 Thread Ed Kubaitis
Dan Kegel wrote: (Crypto newbie here.) (Me too.) How vulnerable is the current OpenSSL to the Bleichenbacher attack? Must be old hat by now, but someone brought it up at work. The source tree does not seem to contain the word 'bleichenbacher', ... Typo I think. Grep

beta3 success on HP MPE/iX

2000-09-21 Thread BIXBY,MARK (HP-Cupertino,ex1)
Hi openssl-dev, 0.9.6-beta3 tests OK on HP MPE/iX. Thanks for accepting my patch despite the lateness of the current release cycle! OpenSSL self-test report: OpenSSL version: 0.9.6-beta3 Last change: On VMS, stdout may very well lead to a file that is wri... Options:

Re: [ANNOUNCE] US contributions

2000-09-21 Thread Ed Kubaitis
Ulf Moeller wrote: The OpenSSL team has decided to accept submissions from the US now if they are exported legally. We have concluded that the US regulations are not substantially different from those in other countries any more. US export regulations require that US contributors notify

Re: Bleichenbacher attack?

2000-09-21 Thread Dan Kegel
Ed Kubaitis wrote: Dan Kegel wrote: How vulnerable is the current OpenSSL to the Bleichenbacher attack? Must be old hat by now, but someone brought it up at work. The source tree does not seem to contain the word 'bleichenbacher', ... Typo I think. Grep openssl-0.9.5a/CHANGES for

Re: Crash with null base64 input

2000-09-21 Thread Kris Kennaway
On Mon, 18 Sep 2000, Richard Levitte - VMS Whacker wrote: From: Kris Kennaway [EMAIL PROTECTED] kris Could you give me a pointer to the patch? I'd like to fix this, and we kris won't be bringing 0.9.6 into 4.1-STABLE for a month or so.

Re: Crash with null base64 input

2000-09-21 Thread Richard Levitte - VMS Whacker
From: Kris Kennaway [EMAIL PROTECTED] kris Well, this is odd. I no longer get the crash on one of my machines after kris applying the patch, but I do on another after rebuilding everything in kris sight. If I copy the working libcrypto.so to the other machine (FreeBSD kris uses shared

Re: Bleichenbacher attack?

2000-09-21 Thread Ulf Möller
On Thu, Sep 21, 2000 at 03:09:06PM -0500, Ed Kubaitis wrote: How vulnerable is the current OpenSSL to the Bleichenbacher attack? Must be old hat by now, but someone brought it up at work. The source tree does not seem to contain the word 'bleichenbacher', ... Typo I think. Grep

Re: Bleichenbacher attack?

2000-09-21 Thread Bodo Moeller
On Thu, Sep 21, 2000 at 12:13:47PM -0700, Dan Kegel wrote: How vulnerable is the current OpenSSL to the Bleichenbacher attack? Must be old hat by now, but someone brought it up at work. The source tree does not seem to contain the word 'bleichenbacher', and it's only been mentioned in

Re: Crash with null base64 input

2000-09-21 Thread Kris Kennaway
On Fri, 22 Sep 2000, Richard Levitte - VMS Whacker wrote: From: Kris Kennaway [EMAIL PROTECTED] kris Well, this is odd. I no longer get the crash on one of my machines after kris applying the patch, but I do on another after rebuilding everything in kris sight. If I copy the working

Re: 6 more beta3 successes (1 small issue though)

2000-09-21 Thread Kris Kennaway
On Thu, Sep 21, 2000 at 07:42:51PM +0200, Richard Levitte - VMS Whacker wrote: peter+openssl-dev gcc -I. -I../include -DTERMIOS -O3 -fomit-frame-pointer -c mem_dbg.c peter+openssl-dev cc1: warning: peter+openssl-dev *** peter+openssl-dev *** The -O3 flag TRIGGERS KNOWN OPTIMIZER BUGS ON

Re: 6 more beta3 successes (1 small issue though)

2000-09-21 Thread Richard Levitte - VMS Whacker
From: Kris Kennaway [EMAIL PROTECTED] kris FreeBSD/Alpha shouldn't use anything higher than -O. I assume that's "for now"... -- Richard Levitte \ Spannvägen 38, II \ [EMAIL PROTECTED] Chairman@Stacken \ S-168 35 BROMMA \ T: +46-8-26 52 47 Redakteur@Stacken \ SWEDEN \ or

Re: make fails

2000-09-21 Thread Richard Levitte - VMS Whacker
From: "Yakin, Francis" [EMAIL PROTECTED] fyakin /usr/local/include/netdb.h:66: sys/bitypes.h: No such file or directory fyakin /usr/local/include/netdb.h:68: sys/cdefs.h: No such file or directory Looks like you need to install some development packages. I assume you're playing with Linux?

RE: make fails

2000-09-21 Thread Yakin, Francis
No, I am using Solaris 8 thanks francis -Original Message- From: Richard Levitte - VMS Whacker [mailto:[EMAIL PROTECTED]] Sent: Thursday, September 21, 2000 1:35 PM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: make fails From: "Yakin, Francis" [EMAIL