[openssl.org #2769] problem with openssl 1.0.1 and 512bits rsa key

2012-03-23 Thread Jérémy Lal via RT
Hi, after updating to openssl 1.0.1 (debian package), authentication against a test server with a 512 bit rsa key gives : openssl s_client -connect 127.0.0.1:12346 -key /home/dev/agent1-key.pem -cert /home/dev/agent1-cert.pem ... 139860308645544:error:04075070:rsa routines:RSA_sign:digest

[openssl.org #2770] openssl cryptodev fixes

2012-03-23 Thread Nikos Mavrogiannopoulos via RT
Hello, This patch fixes issue with cryptodev engine being used to generate signatures, and adds support for SHA2 hashes. I don't know if there are more open issues in the digests code, but with this patch using make test in openssl source succeeds (previously it failed). regards, Nikos Index:

[openssl.org #2769] problem with openssl 1.0.1 and 512bits rsa key

2012-03-23 Thread Stephen Henson via RT
[kapo...@melix.org - Fri Mar 23 11:59:30 2012]: Hi, after updating to openssl 1.0.1 (debian package), authentication against a test server with a 512 bit rsa key gives : openssl s_client -connect 127.0.0.1:12346 -key /home/dev/agent1- key.pem -cert /home/dev/agent1-cert.pem ...

[openssl.org #2768] Bug: internal_verify() hides errors from callbacks after X509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE

2012-03-23 Thread Stephen Henson via RT
[rouss...@measurement-factory.com - Wed Mar 21 10:24:07 2012]: Hello, A verification callback registered with SSL_CTX_set_verify() gets called for most validation errors, as expected. The callback always returns 1 (keep validating) result so that it can see all errors. However,

Re: [openssl.org #2769] problem with openssl 1.0.1 and 512bits rsa key

2012-03-23 Thread Jérémy Lal via RT
On 23/03/2012 13:25, Stephen Henson via RT wrote: [kapo...@melix.org - Fri Mar 23 11:59:30 2012]: Hi, after updating to openssl 1.0.1 (debian package), authentication against a test server with a 512 bit rsa key gives : openssl s_client -connect 127.0.0.1:12346 -key /home/dev/agent1-

problem connecting to MS Exchange 2003 server through IMAPS

2012-03-23 Thread Imre Gergely
Hi I'm using Ubuntu 12.04 (devel version). Today my openssl package got updated to 1.0.1-2 and I cannot connect to my Exchange 2003 server through IMAPS to get my emails. I tracked the problem down to openssl version 1.0.1. I downloaded 1.0.1 and 1.0.0h from openssl.com, compiled them and

Re: [openssl.org #2769] problem with openssl 1.0.1 and 512bits rsa key

2012-03-23 Thread Jérémy Lal
On 23/03/2012 13:25, Stephen Henson via RT wrote: [kapo...@melix.org - Fri Mar 23 11:59:30 2012]: Hi, after updating to openssl 1.0.1 (debian package), authentication against a test server with a 512 bit rsa key gives : openssl s_client -connect 127.0.0.1:12346 -key /home/dev/agent1-

[openssl.org #2771] [BUG] Openssl 1.0.1 times out when connecting to Outlook Exchange 2007

2012-03-23 Thread Steven Allen via RT
OpenSSL negotiation times out when connecting to Outlook Exchange 2007 both through Outlook Web Access (webmail) and IMAP (POP untested). This bug appeared between version 1.0.0h and 1.0.1-beta1. OS: Arch Linux Applications tested: Offlineimap (IMAP), elinks (webmail), wget (webmail). Version:

[openssl.org #2772] Bug w/ patch: OpenSSL 1.0.1 rejects empty NewSessionTicket

2012-03-23 Thread Jack Lloyd via RT
RFC 5077 section 3.3 says: If the server determines that it does not want to include a ticket after it has included the SessionTicket extension in the ServerHello, then it sends a zero-length ticket in the NewSessionTicket handshake message. However an OpenSSL 1.0.1 client will

[openssl.org #2771] [BUG] Openssl 1.0.1 times out when connecting to Outlook Exchange 2007

2012-03-23 Thread Stephen Henson via RT
[ste...@stebalien.com - Fri Mar 23 18:21:39 2012]: OpenSSL negotiation times out when connecting to Outlook Exchange 2007 both through Outlook Web Access (webmail) and IMAP (POP untested). This bug appeared between version 1.0.0h and 1.0.1-beta1. OS: Arch Linux Applications tested: