[openssl.org #1660] Request for feature, all Windows systems, all OpenSSL versions.

2008-04-16 Thread Lutz Jaenicke via RT
I agree with Shaw Graham George's post on openssl-dev. Modifying system settings upon installation would seem to be too intrusive for the OpenSSL source package. OpenSSL as distributed by the OpenSSL team does not modify system settings during installation on any platform. Typically integrators

Re: 64 bits computer always returns the same salt

2008-04-16 Thread Lutz Jaenicke
David Erosa García wrote: Hello all. I tried the openssl-users list but I think this may be a question for the devel list: I'm doing my homework about openssl, but *this question has nothing to do with it*. It's just a doubt that arised while doing it. There is one exercise with the

Re: 64 bits computer always returns the same salt

2008-04-16 Thread Dr. Stephen Henson
On Wed, Apr 16, 2008, Lutz Jaenicke wrote: David Erosa García wrote: He???llo all. I tried the openssl-users list but I think this may be a question for the devel list: I'm doing my homework about openssl, but *this question has nothing to do with it*. It's just a doubt that

Re: [openssl.org #1663] bug report openssl-0.9.8g on Windows XP

2008-04-16 Thread Lutz Jaenicke via RT
Andrew Lamoureux via RT wrote: Hi, I'd like to report a bug in openssl-0.9.8g compiled with Visual Studio. OS is Windows XP. Access violation occurs when BN_rshift() is used on a BIGNUM whose bit length is less (amount required varies) than the number of bits requesting to be shifted.

[openssl.org #1662] key generation creates world-readable keys by default

2008-04-16 Thread Lutz Jaenicke via RT
OpenSSL does create keys in more components than just gen(r|d)sa. In none of these functions any file permission mask is used. All of the components in openssl/apps are using the file-BIO which behaves like stdio and does not have idea about file permissions. People using OpenSSL to generate their