[openssl.org #3030] openssl 1.0.1 doesn't get response when negotiating connection to server needing TLSv1

2013-05-03 Thread fromopen...@homelinkcs.com via RT
With openssl 1.0.0j, I could connect to www.energydirect.com using: openssl s_client -connect www.energydirect.com:443 But since my distribution upgraded to 1.0.1c, that command just shows CONNECTED(0003), hangs for a while, then eventually outputs: write:errno=104 --- no peer certificate

[openssl.org #3031] [PATCH] Undef X509_NAME also in x509v3.h like x509.h

2013-05-03 Thread Robin Lee via RT
Hi, all. Undef X509_NAME in x509_v3.h with the same codes in x509.h. The following header file arrangement will make program fail to build with MinGW: #include openssl/x509.h #include windows.h // Or any other header file that #define X509_NAME #include openssl/x509v3.h int main(int argc,

[openssl.org #3032] Possible openssl bug - EVP_CIPHER_CTX_iv_length dont report correct value after EVP_CTRL_GCM_SET_IVLEN

2013-05-03 Thread Bogdan via RT
Hi In my test program I noticed that EVP_CIPHER_CTX_iv_length dont report correct value after EVP_CTRL_GCM_SET_IVLEN The EVP_CIPHER_CTX_iv_length reports 12 instead of 16 The CTEXT changes as I change value from 12 to 16 in EVP_CIPHER_CTX_ctrl(EVP_CTRL_GCM_SET_IVLEN) suggesting that the ivlen of

[openssl.org #3033] Bug Report: Make Error: can't encode register '%ch' in an instruction requiring REX prefix.

2013-05-03 Thread Davis, Ellen via RT
Hello, I am trying to build openssl. The make does not complete because of the below error. Operating system: Mac OSX 10.7.5 OpenSSL Version : openssl-1.0.1e ./Configure darwin64-x86_64-cc make ... cc -I../crypto -I.. -I../include -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H

FW: [openssl.org #3033] Bug Report: Make Error: can't encode register '%ch' in an instruction requiring REX prefix.

2013-05-03 Thread Davis, Ellen via RT
Never mind. Updating to Xcode 4.6 fixed this. Ellen Davis UCit Instructional and Research Computing P. O. Box 210088 Cincinnati OH 45221-0088 513-556-9013 ellen.da...@uc.edu 303 Zimmer Hall -- Forwarded Message From: Ellen Davis davi...@ucmail.uc.edu Date: Tue, 16 Apr 2013 11:55:37

[openssl.org #3034] BUG REPORT: core dump when ssl renegociation

2013-05-03 Thread Guillaume MULLER via RT
Hi, I had trouble accessing some https pages from Java, so I played with wget and got a core dump. Corentin (that I put in CC of this mail) from the Loop hackerspace in Paris, helped me trace this bug to come from OpenSSL. Please find more information below. This bug occurs at least with an

[openssl.org #3037] [PATCH] so 1.0.1e will build with no-tlsext option specified

2013-05-03 Thread geoff_l...@mcafee.com via RT
These patches primarily move around a few #ifdefs so that 1.0.1e will compile when the no-tlsext option is specified. Note that when no-tlsext is specified, no-srtp is forced now too in addition to no-srp and no-heartbeats. I'm not 100% confident in these changes, so I'd appreciate some level

[openssl.org #3038] [PATCH]: Fix warning-level alert handling in 0.9.8

2013-05-03 Thread manc...@hush.com via RT
Hello. OpenSSL 0.9.8y does not properly handle warning level alerts in SSLv23 client method unlike OpensSSL 1.0.0+. For example, when OpenSSL 0.9.8 initiates a connection using TLS-SNI extensions in SSLv23 mode and the server replies to client hello with an unrecognized_name warning alert, the

[openssl.org #3039] Can't Compile openssl-fips-1.1.2: collect2: ld returned 1 exit status

2013-05-03 Thread Smith, Burton via RT
Why wouldn't openSsl compile in Santiago? I get a stream of undefined references that seem to only count as one error. fips_desmovs.o: In function `DESTest': fips_desmovs.c:(.text+0x45b): undefined reference to `EVP_des_ede3_cfb1' fips_desmovs.c:(.text+0x49b): undefined reference to

[openssl.org #3040] [openssl-1.0.1e] MinGW compilation - Perl invocation failure - Perlbin/perl.exe: No such file or directory

2013-05-03 Thread Albert via RT
Hi, ** DESCRIPTION: While compiling 'openssl-1.0.1e' with MinGW toolchain, compilation fails with following error message : /bin/sh: Perlbin/perl.exe: No such file or directory when building x86cpuid.s target. ** HOW TO REPRODUCE : ** PERL installed in D:\Perl (perl 5.14.2) **

Re: [openssl.org #2895] AutoReply: Sendmail v8.14.4 is not working with OpenSSL 0.9.8m onwards on AIX

2013-05-03 Thread vikas vicky via RT
Hello Guys , Any help / suggestion/work-around is greatly appreciated for this issue. Thank you all for your help time . = Thanks Vikas K Vicky On Thu, Oct 11, 2012 at 7:41 PM, The default queue via RT r...@openssl.orgwrote: Greetings, This message has been

RE: [openssl.org #3039] AutoReply: Can't Compile openssl-fips-1.1.2: collect2: ld returned 1 exit status

2013-05-03 Thread Smith, Burton via RT
Thanks, but after playing with this puzzle for a while I combined the configuration options that were supposed to correct it individually. It worked. The proper command is: sh config no-shared \ fips Persistence pays off. --- Thanks, Burton L. Smith w:801-584-6164

Re: [openssl.org #3036] openssl-0.9.8y config removes symbolic link /dev/null on Solaris

2013-05-03 Thread Mike Frysinger via RT
On Friday 03 May 2013 12:56:41 Mitch Halmu via RT wrote: When running the config script on Solaris 9 (sparc), the symbolic link /dev/null - /devices/pseudo/mm@0:null is destroyed. You will notice it happened by the error messages that start spewing. To repair: # ln -s

[openssl.org #3030] openssl 1.0.1 doesn't get response when negotiating connection to server needing TLSv1

2013-05-03 Thread Stephen Henson via RT
On Fri May 03 18:52:49 2013, fromopen...@homelinkcs.com wrote: With openssl 1.0.0j, I could connect to www.energydirect.com using: openssl s_client -connect www.energydirect.com:443 But since my distribution upgraded to 1.0.1c, that command just shows CONNECTED(0003), hangs for a while,