Re: [PATCH] argument passing to app_verify_callback

2002-02-22 Thread D. K. Smetters
The one thing that makes me a bit more comfortable with the change to the prototype is the fact that in the current code and documentation, everywhere SSL_CTX_set_cert_verify_callback() is mentioned, it has a big warning next to it saying that it is currently broken and is supposed to actually

RE: [MiNT] M68020 bn_asm

2002-02-22 Thread Max Campos
Howard, I've been working on porting OpenSSL to the Palm and have most of it completed; and as such having 68K assembler versions is _extremely_ important. Otherwise, the implementation might very well be too slow to be usable on the Palm. So...keep up the good work! - Max On Tue, 19

RE: 0.9.7 approaching

2002-02-22 Thread lgazis
I tested the Feb 18 OpenSSL_0_9_7-stable branch on Solaris 7 (using the SUNWspro C compiler), just to make sure none of the changes break support for CryptoSwift. Results were successful: It configures, builds, and when I build Apache 1.3.23 using this snapshot, I am able to successfully access

[PATCH] crypto/objects/Makefile refers to perl

2002-02-22 Thread jpmg
openssl-0.9.6c/crypto/objects/Makefile has two rules in which an attempt is made to execute perl instead of $(PERL) . begin patch- *** crypto/objects/Makefile.distMon Feb 18 12:31:32 2002 --- crypto/objects/Makefile Mon Feb 18 12:27:39 2002

smime segfault on redhat 7.2

2002-02-22 Thread alexandru matei
Hello, I complied latest snaps (all snaps from 2002) on a Redhat 7.2 system. Make test finished succesfully. But on trying openssl smime -sign -encrypt command, it segfaults. The rest of commands (as far as I tested) are OK. Can you give me some advice? Alex

Wrong OIDS for PKCS #9 gender and pseudonym?

2002-02-22 Thread Leonard Janke
According to PKCS #9 v2 gender should have the OID 1 3 6 1 5 5 7 9 3 and psuedonym should have the OID 1 2 840 113549 1 9 3. According to OpenSSL's objects.h gender has the OID 1 3 6 1 5 5 7 9 4 and pseudonym has the OID 1 3 6 1 5 5 7 9 3, however. Leonard

key file

2002-02-22 Thread Imran Badr
Hi, The keyfile, representing an ecrypted private key, generated by openssl is ASN.1 type RSAPrivateKey (PKCS#1), ecrypted using DES-EDE3-CBC and then PEM encoded. Is that right ? Thanks, Imran. __ OpenSSL Project

Fixes for 0.9.6-stable branch

2002-02-22 Thread Oscar Jacobsson
Hi! Just a couple of quick niggles with the 0.9.6-stable branch: * The fix for crypto/tmdiff.c (ie. the diff between 1.9.2.1 1.9.2.2) needs to be merged into this branch as well. Missing #endif. * crypto/bio/bss_bio.c now checks SSIZE_MAX, and in the visual c++ limits.h this won't get defined

Re: 0.9.7 approaching

2002-02-22 Thread Bear Giles
Are you in the US BTW if so can you resend you patch with a CC: to [EMAIL PROTECTED] Is that the preferred address now, instead of [EMAIL PROTECTED]? I've tried checking the bxa.doc.gov website, but it's aimed at commercial exporters instead of OSS exporters.

Re: [PATCH] bad uid shortname

2002-02-22 Thread Oscar Jacobsson
This was all actually changed intentionally a while back as there was a conflict between id-at-uniqueIdentifier and { 0 9 2342 19200300 100 1 1 } (henceforth simply reffered to as Userid.) The reason for the conflict is that both claimed the short name uid. Userid, having formally had the

Re: RAND_poll hangs on WINNT 4.0

2002-02-22 Thread Jeffrey Altman
As came out in discussions on the openssl-users list, this problem appears to be restricted to a specific use case. When RAND_poll() is called from within the init routine of a DLL. The attempt to query the HKPD\Global key results in a series of function calls being made to various COM objects.

Re: smime segfault on redhat 7.2

2002-02-22 Thread Dr S N Henson
alexandru matei wrote: Hello, I complied latest snaps (all snaps from 2002) on a Redhat 7.2 system. Make test finished succesfully. But on trying openssl smime -sign -encrypt command, it segfaults. The rest of commands (as far as I tested) are OK. Can you give me some advice? I'll

Re: key file

2002-02-22 Thread Dr S N Henson
Imran Badr wrote: Hi, The keyfile, representing an ecrypted private key, generated by openssl is ASN.1 type RSAPrivateKey (PKCS#1), ecrypted using DES-EDE3-CBC and then PEM encoded. Is that right ? It doesn't have to be triple DES encrypted. The traditional format involves adding some

apps.h bug

2002-02-22 Thread Andrew W. Gray
apps .h needs a #include openssl/engine.h added. apps_startup() will fail in the NON-MONOLITHIC build for the snapshot of the 18th. in apps.h: #if defined(MONOLITH) !defined(OPENSSL_C) # define apps_startup() \ do_pipe_sig() # define apps_shutdown() #else # if

Re: Problem with RAND_poll() on Windows NT 4.0 Server

2002-02-22 Thread Alex Pankratov
Guys, I've submitted bug report below about a month ago to [EMAIL PROTECTED] Since I see that only one of the fixes got into 0.9.7 (independently reported by other person), I thought I'd repeat to dev list just in case. cheers, alex. -Original Message- From: Alex Pankratov Sent:

Re: Problem with RAND_poll() on Windows NT 4.0 Server

2002-02-22 Thread Jeffrey Altman
Alex: Where in your app are you calling RAND_poll()? RAND_poll() cannot be called from within DllMain() in a DLL. Is that how you are calling it? - Jeff Guys, I've submitted bug report below about a month ago to [EMAIL PROTECTED] Since I see that only one of the fixes got into 0.9.7

req.c bug

2002-02-22 Thread Andrew W. Gray
line 475 NCONF_load bug exhibited in non-MONOLITH build Andrew (openssl-0.9.7-stable-SNAP-20020218) --- req.c.orig Sat Dec 1 18:03:26 2001 +++ req.c Fri Feb 22 15:01:30 2002 @@ -177,6 +177,7 @@ unsigned long chtype = MBSTRING_ASC; #ifndef MONOLITH MS_STATIC char

Re: Subject: -lsocket missing for Solaris 2.6

2002-02-22 Thread Tim Rice
On Thu, 21 Feb 2002, Jonsson Per-Arne S. wrote: Hello! I have problem with the syntax and where to add lsocket into the Makefile. What config target are you using? What does the EX_LIBS= line in Makefile say? -- Tim RiceMultitalents(707) 887-1469

RE: [MiNT] M68020 bn_asm

2002-02-22 Thread Howard Chu
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Richard Zidlicky On Tue, Feb 19, 2002 at 03:43:12PM -0800, Howard Chu wrote: I just checked the 68060 user manual, you're right. That means the plain 68000 code is needed on the 68060. (What a