Re: [openssl.org #2974] OpenSSL 0.9.8y compilation error on Windows

2013-02-11 Thread Andy Polyakov via RT
.\ssl\s3_cbc.c(645) : warning C4761: integral size mismatch in argument; conversion supplied NMAKE : fatal error U1077: 'cl' : return code '0x2' Stop. fixed in http://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ff58eaa4b645a38f3a226cf566d969fffa64ef94 Downloaded as

Re: access to git repository from behind a proxy

2013-02-11 Thread Lutz Jaenicke
On 02/07/2013 03:35 PM, Vladimir Kotal wrote: Hi all, I am trying to follow the steps for cloning the git repository found on http://www.openssl.org/source/repos.html from behind a proxy. The proxy does not allow connections to the git port 9418. I tried http/https which both fail:

RE: build fips 2.0.2

2013-02-11 Thread Memmott, Lester
Bin Lin, I know this won't be of much help but I've built with VS2008 and it seems to build fine. Can you provide more details about the failure? Is it a missing symbol? Syntax error? Also, I'd be interested to know if you are able to run the openssl tests successfully once it's built

Re: [openssl.org #2974] OpenSSL 0.9.8y compilation error on Windows

2013-02-11 Thread Info via RT
Andy Polyakov via RT Mon, 11 Feb 2013 01:18:37 -0800 .\ssl\s3_cbc.c(251) : error C2220: warning treated as error - no object file generated .\ssl\s3_cbc.c(251) : warning C4029: declared formal parameter list different from definition NMAKE : fatal error U1077: 'cl' : return code '0x2'

[openssl.org #2974] OpenSSL 0.9.8y compilation error on Windows

2013-02-11 Thread Stephen Henson via RT
On Sat Feb 09 15:02:54 2013, i...@ecsystems.nl wrote: Same here, but what are we missing by not using /WX ? can the build be relied upon since it is a fatal error to begin with... if it was a warning I would not be concerned. The /WX flags means treat all warnings as errors. Steve. -- Dr

OpenSSL version 1.0.1e released

2013-02-11 Thread OpenSSL
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 1.0.1e released === OpenSSL - The Open Source toolkit for SSL/TLS http://www.openssl.org/ The OpenSSL project team is pleased to announce the release of version 1.0.1e of our open source

Re: OpenSSL version 1.0.1e released

2013-02-11 Thread Attila-Mihaly Balazs
The linked changelist (http://www.openssl.org/source/exp/CHANGES) comes up as a 404 to me. Regards, Attila Balazs On Mon, Feb 11, 2013 at 6:07 PM, OpenSSL open...@master.openssl.org wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 1.0.1e released

Re: OpenSSL version 1.0.1e released

2013-02-11 Thread Dr. Stephen Henson
On Mon, Feb 11, 2013, Attila-Mihaly Balazs wrote: The linked changelist (http://www.openssl.org/source/exp/CHANGES) comes up as a 404 to me. Ugh that's another artificate from CVS which needs updating for git. FYI the only significant change is the corrected fix for CVE-2013-0169 Steve. --

Re: OpenSSL version 1.0.1e released

2013-02-11 Thread Kurt Roeckx
On Mon, Feb 11, 2013 at 05:07:22PM +0100, OpenSSL wrote: OpenSSL version 1.0.1e released === Running the test suite gives me: [...] Testing ciphersuites Testing ciphersuites for TLSv1.2 Testing AES256-GCM-SHA384 Available compression methods: 1: zlib

Re: OpenSSL version 1.0.1e released

2013-02-11 Thread Dr. Stephen Henson
On Mon, Feb 11, 2013, Kurt Roeckx wrote: On Mon, Feb 11, 2013 at 05:07:22PM +0100, OpenSSL wrote: OpenSSL version 1.0.1e released === Running the test suite gives me: [...] Testing ciphersuites Testing ciphersuites for TLSv1.2 Testing

Re: OpenSSL version 1.0.1e released

2013-02-11 Thread Kurt Roeckx
On Mon, Feb 11, 2013 at 06:33:39PM +0100, Dr. Stephen Henson wrote: On Mon, Feb 11, 2013, Kurt Roeckx wrote: On Mon, Feb 11, 2013 at 05:07:22PM +0100, OpenSSL wrote: OpenSSL version 1.0.1e released === Running the test suite gives me:

Re: OpenSSL version 1.0.1e released

2013-02-11 Thread Dr. Stephen Henson
On Mon, Feb 11, 2013, Kurt Roeckx wrote: On Mon, Feb 11, 2013 at 06:33:39PM +0100, Dr. Stephen Henson wrote: On Mon, Feb 11, 2013, Kurt Roeckx wrote: On Mon, Feb 11, 2013 at 05:07:22PM +0100, OpenSSL wrote: OpenSSL version 1.0.1e released

Re: OpenSSL version 1.0.1e released

2013-02-11 Thread Kurt Roeckx
On Mon, Feb 11, 2013 at 07:22:49PM +0100, Dr. Stephen Henson wrote: On Mon, Feb 11, 2013, Kurt Roeckx wrote: On Mon, Feb 11, 2013 at 06:33:39PM +0100, Dr. Stephen Henson wrote: On Mon, Feb 11, 2013, Kurt Roeckx wrote: On Mon, Feb 11, 2013 at 05:07:22PM +0100, OpenSSL wrote:

Re: [PATCH] Fix IV check and padding removal.

2013-02-11 Thread David Woodhouse
On Mon, 2013-02-11 at 20:59 +, David Woodhouse wrote: From 32cc2479b473c49ce869e57fded7e9a77b695c0d Mon Sep 17 00:00:00 2001 From: Dr. Stephen Henson st...@openssl.org Date: Thu, 7 Feb 2013 21:06:37 + Subject: [PATCH] Fix IV check and padding removal. ... + if (s-version =

Re: [PATCH] Fix IV check and padding removal.

2013-02-11 Thread David Woodhouse
From 32cc2479b473c49ce869e57fded7e9a77b695c0d Mon Sep 17 00:00:00 2001 From: Dr. Stephen Henson st...@openssl.org Date: Thu, 7 Feb 2013 21:06:37 + Subject: [PATCH] Fix IV check and padding removal. ... + if (s-version = TLS1_1_VERSION || s-version == DTLS1_VERSION) That's

Re: [PATCH] Fix IV check and padding removal.

2013-02-11 Thread David Woodhouse
On Mon, 2013-02-11 at 13:24 -0800, Ben Laurie wrote: Ah, it looks like you only moved the offending code; it was actually Ben's fault in commit 9f27de17 / 014265eb. Gah! I wish tests would pick up stuff like this! As far as I'm aware there are no tests for DTLS1_BAD_VER. Apart from my

Re: [PATCH] Fix IV check and padding removal.

2013-02-11 Thread David Woodhouse
Same fix for 1.0.0 branch: diff --git a/ssl/s3_cbc.c b/ssl/s3_cbc.c index 5b3f371..61413b8 100644 --- a/ssl/s3_cbc.c +++ b/ssl/s3_cbc.c @@ -148,7 +148,7 @@ int tls1_cbc_remove_padding(const SSL* s, unsigned padding_length, good, to_check, i; const unsigned overhead = 1 /* padding

RE: Setting font

2013-02-11 Thread Salz, Rich
Is this anyway to set a font type so that it all looks the same ? This is most definitely NOT an OpenSSL issue. OpenSSL has absolutely no concept of fonts, markup, or anything like that. /r$ -- Principal Security Engineer Akamai Technology Cambridge, MA