Re: ARM Assembly Error

2012-05-04 Thread Andy Polyakov
Hi, I've been trying to build aes-armv4 for an embedded ARM 9 using the Green Hills Software tools. In the FIPS canister, the line following the label .Lok ... .Lok: stmdb sp!,{r4-r12,lr} sub r10,r3,#fips_aes_set_encrypt_key-AES_Te-1024@ Te4 gets this error: [asarm]

AW: [openssl.org #2805] uplink-x86_64-pl-script error when running ms\do_win64a on windows 7-64bit command line

2012-05-04 Thread ITF-EDV Kick Tobias via RT
Thank you for your quick response. how come it's not required in all other perlasm modules? errors do also occure in other perlasm modules, but i'am running this configure command without asm support which avoids calling other perlasm modules? perl Configure debug-VC-WIN64A no-asm

Re: [openssl.org #2787] [PATCH] enc: compress before compress/base64 is applied

2012-05-04 Thread Sebastian Andrzej Siewior
On Sat, Apr 07, 2012 at 03:39:13PM +0200, Sebastian Andrzej Siewior via RT wrote: The command |openssl enc -pass pass:pass -iv 0 -K 0 -S 0 -aes-256-cbc -base64 file file.enc.b64 first performs the encryption followed by base64 encoding. That means the output is base64 encoded as

[openssl.org #2806] [PATCH] key exchange cipherlist labels for 8 ciphersuites (3e, 68, a4, a5, c029, c02a, c031, c032)

2012-05-04 Thread PK via RT
There are two groups of four ciphersuites that I think have mismatched key exchange cipherlist labels. The first four are DH-DSS ciphersuites with which don't seem to be enabled, but as long as they are in the table perhaps they ought to be corrected. This patch changes Kx in those instances

[openssl.org #2802] Resolved: 1.0.0's SSL_OP_ALL and SSL_OP_NO_TLSv1_1

2012-05-04 Thread Stephen Henson via RT
According to our records, your request has been resolved. If you have any further questions or concerns, please respond to this message. __ OpenSSL Project http://www.openssl.org Development Mailing

Re: OCSP question

2012-05-04 Thread Dr. Stephen Henson
On Thu, May 03, 2012, Alexander Komyagin wrote: Thanks for the note, Stephen! I'll certainly take this into account. If I incorporate OCSP check in check_revoked() function, which is called during SSL connect/handshake it would just block during connect op for a while, and I believe that no

[openssl.org #2806] [PATCH] key exchange cipherlist labels for 8 ciphersuites (3e, 68, a4, a5, c029, c02a, c031, c032)

2012-05-04 Thread Stephen Henson via RT
[runningdoglac...@yahoo.com - Fri May 04 11:18:52 2012]: There are two groups of four ciphersuites that I think have mismatched key exchange cipherlist labels. The first four are DH-DSS ciphersuites with which don't seem to be enabled, but as long as they are in the table perhaps they

Re: OCSP question

2012-05-04 Thread Alexander Komyagin
Can you give me an example of such application? I'll take a look at it. On Fri, 2012-05-04 at 13:14 +0200, Dr. Stephen Henson wrote: On Thu, May 03, 2012, Alexander Komyagin wrote: Thanks for the note, Stephen! I'll certainly take this into account. If I incorporate OCSP check in

Certificate Management on an Embedded System

2012-05-04 Thread Siedzik, Michael
Hello, I am integrating OpenSSL X.509 functionality to an embedded system (first use will be for SSH authentication), which presents a unique set of problems. As I stated in an earlier post, certificate revocation checking will be performed by OCSP and not CRLs due to limited storage capacity.

1.0.1b v. VMS

2012-05-04 Thread Steven M. Schweda
1. Someone posted a complaint on comp.os.vms about a missing header file: http://groups.google.com/group/comp.os.vms/browse_thread/thread/0887b1dfe5609d3f Apparently, srtp.h is new, and was not added to the list in ssl/install-ssl.com, so it doesn't get put into the installation