[openssl.org #445] typos in man pages

2003-01-10 Thread Richard Levitte via RT
I've made the corrections (most were already there) in 0.9.7a-dev and 0.9.8-dev. This ticket is now resolved. [[EMAIL PROTECTED] - Fri Jan 10 08:44:04 2003]: Hello, Some typos in the openssl man pages were discovered (see NetBSD's PR misc/19627

Get client IP

2003-01-10 Thread p b
Hi, I use BIO to make a client-server connexion, For the server, How can I get the IP of the client when a connexion is accepted Thanks __ OpenSSL Project http://www.openssl.org Development

[openssl.org #432] pkcs#11 engine for openssl 0.9.7 0.9.6

2003-01-10 Thread Richard Levitte via RT
It's unfortunate that cryptoki.h is GPLd, or I would put it in our contribution area. GPL is not compatible with the OpenSSL license. Is it possible to get a different cryptoki.h? Also, is conf.h really necssary? I'm willing to do the transformation needed for this bundle to work properly

[openssl.org #437] bad instructions in CHANGES for platform-dependent builds

2003-01-10 Thread Richard Levitte via RT
[[EMAIL PROTECTED] - Sat Jan 4 12:04:29 2003]: These instructions, from the CHANGES file: == *) Add appropriate support for separate platform-dependent build directories. The recommended way to make a platform-dependent build directory is the following (tested on

[openssl.org #437] bad instructions in CHANGES for platform-dependent builds

2003-01-10 Thread Richard Levitte via RT
I've removed '-o -type l' from the note in CHANGES. I've also added a note on separate build directories at the end of INSTALL. Finally, I've made sure that test/testgen removes the files it generates if they exist before the actual generation. I've tested this against a read-only source

[openssl.org #437] bad instructions in CHANGES for platform-dependent builds

2003-01-10 Thread Richard Levitte via RT
[[EMAIL PROTECTED] - Sat Jan 4 19:22:11 2003]: On Sat, 4 Jan 2003, Nick Briggs via RT wrote: [snip] # Place yourself outside of the OpenSSL source tree. In # this example, the environment variable OPENSSL_SOURCE # is assumed to contain the absolute OpenSSL

Re: [openssl.org #432] pkcs#11 engine for openssl 0.9.7 0.9.6

2003-01-10 Thread Gtz Babin-Ebell
Richard Levitte via RT wrote: Hello Richard, It's unfortunate that cryptoki.h is GPLd, or I would put it in our contribution area. GPL is not compatible with the OpenSSL license. Is it possible to get a different cryptoki.h? Also, is conf.h really necssary? conf.h is only incuded if

Re: [openssl.org #423] openssl-0.9.7-stable-SNAP-20021229: lddproblems

2003-01-10 Thread Richard Levitte - VMS Whacker
OK, I've hacked a little. Please try the following patch on a 0.9.7 snapshot, and put the attached openssl-shared.txt in doc/: Index: Makefile.org === RCS file: /e/openssl/cvs/openssl/Makefile.org,v retrieving revision 1.154.2.49

Re: [openssl.org #423] openssl-0.9.7-stable-SNAP-20021229: ldd problems

2003-01-10 Thread Richard Levitte - VMS Whacker via RT
OK, I've hacked a little. Please try the following patch on a 0.9.7 snapshot, and put the attached openssl-shared.txt in doc/: Index: Makefile.org === RCS file: /e/openssl/cvs/openssl/Makefile.org,v retrieving revision 1.154.2.49

Re: [openssl.org #423] openssl-0.9.7-stable-SNAP-20021229: lddproblems

2003-01-10 Thread Andy Polyakov
-- OpenSSL Shared Libraries have been installed in: [directory name] If this directory is not in a standard system path for dynamic/shared libraries, then you will have problems linking and executing applications that

[openssl.org #447] [Fwd: Bug#176058: openssl: Should ask password only after basic input validation]

2003-01-10 Thread Christoph Martin via RT
__ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

[openssl.org #448] [Fwd: Bug#176062: openssl: Expired certificates and recertification]

2003-01-10 Thread Christoph Martin via RT
__ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

[openssl.org #449] [Fwd: Bug#176059: openssl: ca shows CSR contents, not preview of certificate]

2003-01-10 Thread Christoph Martin via RT
__ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

Re: [openssl.org #437] bad instructions in CHANGES for platform-dependent builds

2003-01-10 Thread [EMAIL PROTECTED] via RT
I think a sufficient requirement is that files in the source tree that are relative links need to be recreated as relative links within the platform dependent directory. If you just leave out the -o -type l you won't make any of the links, and the include/openssl directory will be empty, which

Re: [openssl.org #437] bad instructions in CHANGES for platform-dependent builds

2003-01-10 Thread [EMAIL PROTECTED] via RT
I'll try the next snapshot.Thanks. __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager

[openssl.org #437] bad instructions in CHANGES for platform-dependent builds

2003-01-10 Thread Richard Levitte via RT
[[EMAIL PROTECTED] - Fri Jan 10 16:35:08 2003]: I think a sufficient requirement is that files in the source tree that are relative links need to be recreated as relative links within the platform dependent directory. exactly. If you just leave out the -o -type l you won't make any of the

Re: [openssl.org #423] openssl-0.9.7-stable-SNAP-20021229:lddproblems

2003-01-10 Thread Richard Levitte - VMS Whacker
In message [EMAIL PROTECTED] on Fri, 10 Jan 2003 15:03:00 +0100, Andy Polyakov [EMAIL PROTECTED] said: appro There is another option, The Right Thing:-) Of course :-). Unfortunately, about -R/-rpath, I've avoided it so far for exactly the reason you mentioned: it doesn't quite support moving

[openssl.org #423] openssl-0.9.7-stable-SNAP-20021229: ldd problems

2003-01-10 Thread Richard Levitte via RT
I just committed the final change that makes 'make install' print a recommendation on handling the shared libraries of such a thing was installed anywhere else than in /usr/lib. The text that's shown is rather close to the one suggested by Jeff, with additions about pkg-config and a

Re: [openssl.org #423] openssl-0.9.7-stable-SNAP-20021229:lddproblems

2003-01-10 Thread Andy Polyakov
Unfortunately, about -R/-rpath, I've avoided it so far for exactly the reason you mentioned: it doesn't quite support moving libraries to a dofferent place and still have it work. And that is what I'm suggesting to adhere to. I.e. to avoid it (and even to remove it from tru64!) and leave this

Re: [openssl.org #423]openssl-0.9.7-stable-SNAP-20021229:lddproblems

2003-01-10 Thread Richard Levitte - VMS Whacker
In message [EMAIL PROTECTED] on Fri, 10 Jan 2003 17:40:18 +0100, Andy Polyakov [EMAIL PROTECTED] said: appro And also, I have understood appro that libssl.so does need a -R/-rpath to be able to find libcrypto.so, appro on which it depends. appro appro This is not true. The fact that 'ldd

Re: [ANNOUNCE] OpenSSL 0.9.7 released

2003-01-10 Thread Corinna Vinschen
On Thu, Jan 09, 2003 at 10:35:16PM +0100, Corinna Vinschen wrote: The 2 is just sort of a counter which is needed to allow more than [...] Hi, I have chosen another packaging method: Version 0.9.6h will consist only of the needed DLLs to link applications build against it. The package

[openssl.org #450] openssl-0.9.7 not building with ncr-scde

2003-01-10 Thread Megele, Martin via RT
Hello, i try building openssl-0.9.7 on an ncr server using ./Configure ncr-scde ( uname -a: cti1dev cti1dev 4.0 3.0 3360,3430-R Pentium(TM)-MCA login info: Welcome to the NCR MP-RAS SVR4 UNIX System UNIX System V Release 4.0 (cti1dev) (pts/0) ) and i get the following linker

Re: [openssl.org #450] openssl-0.9.7 not building with ncr-scde

2003-01-10 Thread Tim Rice
On Fri, 10 Jan 2003, Megele, Martin via RT wrote: Hello, i try building openssl-0.9.7 on an ncr server using ./Configure ncr-scde ( uname -a: cti1dev cti1dev 4.0 3.0 3360,3430-R Pentium(TM)-MCA login info: Welcome to the NCR MP-RAS SVR4 UNIX System UNIX System V Release

[openssl.org #434] duplicate execution of callback with non-blocking SSL_accept

2003-01-10 Thread Lutz Jaenicke via RT
[[EMAIL PROTECTED] - Fri Jan 3 08:21:38 2003]: When a non-blocking SSL_accept() returns -1 with SSL_ERROR_WANT_READ or SSL_ERROR_WANT_WRITE set, the appropriate thing to do is to call SSL_accept() again. This is fine, but the current state machine in ssl3_accept() doesn't seem

[openssl.org #433] 0.9.7 compilation problem with Borland C++ 5.5

2003-01-10 Thread Lutz Jaenicke via RT
[[EMAIL PROTECTED] - Fri Jan 3 06:45:12 2003]: I'm trying to compile 0.9.7 with Borland C++ 5.5 and NASM 0.98.35 on Windows XP Professional SP1 with all updates. I did perl Configure BC-32 no-idea no-mdc2 no-rc5 ms\do_nasm make -f ms\bcb.mak It fails at:

Re: [openssl.org #450] openssl-0.9.7 not building with ncr-scde

2003-01-10 Thread Tim Rice
On Fri, 10 Jan 2003, Tim Rice wrote: On Fri, 10 Jan 2003, Megele, Martin via RT wrote: Undefined first referenced symbol in file strcasecmp ca.o Try adding -lresolv ftime

[openssl.org #431] Help

2003-01-10 Thread Lutz Jaenicke via RT
[[EMAIL PROTECTED] - Thu Jan 2 13:14:21 2003]: Hello, I would configure and install a certification from openssl for Windows 2000 IIS. This is not a bug or enhancement report with respect to the OpenSSL package. Please ask your question on the openssl-users mailing list. Best

[openssl.org #408] Segmentation Fault (openssl-0.9.7-beta6)

2003-01-10 Thread Lutz Jaenicke via RT
[levitte - Fri Dec 20 09:28:56 2002]: Looks to me like everything was successful, really, even index.txt is up to date. Do you have the possibility to debug and find out exactly where the segfault happened? [[EMAIL PROTECTED] - Wed Dec 18 17:22:44 2002]: While executing the

Re: [openssl.org #433] 0.9.7 compilation problem with Borland C++ 5.5

2003-01-10 Thread Frédéric L. W. Meunier via RT
On Fri, 10 Jan 2003 21:27:56 +0100 (MET), Lutz Jaenicke via RT [EMAIL PROTECTED] said: [[EMAIL PROTECTED] - Fri Jan 3 06:45:12 2003]: I'm trying to compile 0.9.7 with Borland C++ 5.5 and NASM 0.98.35 on Windows XP Professional SP1 with all updates. I did perl Configure

Re: [openssl.org #434] duplicate execution of callback with non-blockingSSL_accept

2003-01-10 Thread John Pruitt
Lutz Jaenicke via RT wrote: [[EMAIL PROTECTED] - Fri Jan 3 08:21:38 2003]: When a non-blocking SSL_accept() returns -1 with SSL_ERROR_WANT_READ or SSL_ERROR_WANT_WRITE set, the appropriate thing to do is to call SSL_accept() again. This is fine, but the current state machine in

[openssl.org #449] [Fwd: Bug#176059: openssl: ca shows CSR contents, not preview of certificate]

2003-01-10 Thread Stephen Henson via RT
[[EMAIL PROTECTED] - Fri Jan 10 15:10:09 2003]: Ugh, can't quote the original message... This refers to OpenSSL 0.9.6X which does indeed only show the DN of the CSR (or pseudo CSR in the case of SPKACs) including the old mishandling of multibyte string types. That's one reason why I didn't