Re: [openssl.org #3607] nistz256 is broken.

2014-12-05 Thread Andy Polyakov via RT
Oops! Wrong patch! Correct one attached. If you feel like testing the wrong one, go ahead, but there are some later non-essential adjustments. diff --git a/crypto/ec/ecp_nistz256.c b/crypto/ec/ecp_nistz256.c index bf3fcc6..33b07ce 100644 --- a/crypto/ec/ecp_nistz256.c +++

Re: TLS 1.2 Suite B ECDSA general availability

2014-12-05 Thread Matt Caswell
On 05/12/14 02:10, b_smith...@hotmail.com wrote: I apologize if this is not the right place to post this question but it seems like the best of the choices available to me. I am trying to understand when TLS 1.2 Suite B ECDSA will be generally available. I understand that this functionality

Re: [PATCH] Add API to set minimum and maximum protocol version.

2014-12-05 Thread Tomas Hoger
On Thu, 4 Dec 2014 10:57:11 +0100 Kurt Roeckx wrote: It seems *TLS*_VERSION constants are meant to be used to set minimum / maximum. A drawback of such approach is that applications need to be recompiled and/or modified when OpenSSL is updated with support for newer protocol version, if

Re: [PATCH] Add API to set minimum and maximum protocol version.

2014-12-05 Thread Kurt Roeckx
On Fri, Dec 05, 2014 at 02:14:54PM +0100, Tomas Hoger wrote: On Thu, 4 Dec 2014 10:57:11 +0100 Kurt Roeckx wrote: It seems *TLS*_VERSION constants are meant to be used to set minimum / maximum. A drawback of such approach is that applications need to be recompiled and/or modified when

[openssl.org #3621] Support legacy CA removal, ignore unnecessary intermediate CAs in SSL/TLS handshake by default

2014-12-05 Thread Kai Engert via RT
Enhancement request. I suggest to enhance the trust chain discovery used by openssl, when verifying a SSL/TLS server certificate, to make it work with a popular server configuration. Recently, Mozilla has started to cleanup the Mozilla CA trust list and remove CA certificates that use a weaker

[openssl.org #3622] bug: crypto, valgrind reports improper memory access with AES128 cbc and longer plaintext

2014-12-05 Thread The Tester via RT
I started with an AES256 demo I found at https://github.com/saju/misc and modified the initialisations to use AES128. The test strings that program uses are quite short - less than 100 characters. If I add a significantly longer string to those test values Valgrind reports a string of what I

[openssl.org #3623] faulting module ssleay32.dll, version 0.0.0.0, fault address 0x00010c8b.

2014-12-05 Thread Vijendra Boopathy via RT
Team, Am using openssl for my monitoring tools and i have facing *faulting module ssleay32.dll, version 0.0.0.0, fault address 0x00010c8b *in application log and its all type of windows OS May i know that it is known issue or new issue,if it is known issue please provide issue id. Kindly help

Re: [openssl.org #3607] nistz256 is broken.

2014-12-05 Thread Andy Polyakov via RT
Oops! Wrong patch! Correct one attached. If you feel like testing the wrong one, go ahead, but there are some later non-essential adjustments. diff --git a/crypto/ec/ecp_nistz256.c b/crypto/ec/ecp_nistz256.c index bf3fcc6..33b07ce 100644 --- a/crypto/ec/ecp_nistz256.c +++

Re: [PATCH] Add API to set minimum and maximum protocol version.

2014-12-05 Thread Steffen Nurpmeso
|What is the SECLEVEL you refer to? I had a quick look at SSL_CONF API |pointed out by Stephen.[.] | I did too. Attached a doc patch (against 1.0.2) to match code reality. Fixes linking for me. --steffen diff --git a/doc/ssl/SSL_CONF_cmd.pod b/doc/ssl/SSL_CONF_cmd.pod index

Re: [openssl.org #3622] bug: crypto, valgrind reports improper memory access with AES128 cbc and longer plaintext

2014-12-05 Thread Andy Polyakov via RT
I started with an AES256 demo I found at https://github.com/saju/misc and modified the initialisations to use AES128. The test strings that program uses are quite short - less than 100 characters. If I add a significantly longer string to those test values Valgrind reports a string of what

Re: [openssl.org #3623] faulting module ssleay32.dll, version 0.0.0.0, fault address 0x00010c8b.

2014-12-05 Thread Andy Polyakov via RT
Am using openssl for my monitoring tools and i have facing *faulting module ssleay32.dll, version 0.0.0.0, fault address 0x00010c8b *in application log and its all type of windows OS May i know that it is known issue or new issue,if it is known issue please provide issue id. Kindly help

Re: [openssl-dev] Under-utilization of const in prototyping?

2014-12-05 Thread Viktor Dukhovni
On Fri, Dec 05, 2014 at 05:07:04PM +0100, Kurt Roeckx wrote: On Fri, Dec 05, 2014 at 10:40:07AM -0500, Daniel Kahn Gillmor wrote: (of course it would probably end up modifying some public interfaces, so it would need to take effect publicly during an API change). Adding const to a

Re: [openssl-dev] Under-utilization of const in prototyping?

2014-12-05 Thread Kurt Roeckx
On Fri, Dec 05, 2014 at 05:15:24PM +, Viktor Dukhovni wrote: On Fri, Dec 05, 2014 at 05:07:04PM +0100, Kurt Roeckx wrote: On Fri, Dec 05, 2014 at 10:40:07AM -0500, Daniel Kahn Gillmor wrote: (of course it would probably end up modifying some public interfaces, so it would need to

Re: [openssl-dev] Under-utilization of const in prototyping?

2014-12-05 Thread Salz, Rich
Gee, BOGUS_CONST is a little harsh. MAYBE_CONST or SHOULDBE_CONST would have been nicer. ___ openssl-dev mailing list openssl-dev@openssl.org https://mta.opensslfoundation.net/mailman/listinfo/openssl-dev

Re: [openssl-dev] Under-utilization of const in prototyping?

2014-12-05 Thread Viktor Dukhovni
On Fri, Dec 05, 2014 at 12:28:29PM -0500, Salz, Rich wrote: Gee, BOGUS_CONST is a little harsh. MAYBE_CONST or SHOULDBE_CONST would have been nicer. Wietse does not mince words, and sarcasm is often lost in translation. -- Viktor. ___

[openssl-dev] Ticket 2578

2014-12-05 Thread Krzysztof Kwiatkowski
Hi, Do you plan to integrate this one somewhere soon? https://github.com/openssl/openssl/pull/113 I can help with merge if needed. Kris ___ openssl-dev mailing list openssl-dev@openssl.org

Re: [openssl-dev] [openssl.org #3605] bug report: compilation error and fix for OpenSSL on Cygwin64

2014-12-05 Thread Andy Polyakov via RT
OpenSSL is currently not supported under Cygwin64. Support for Cygwin64 will appear in 1.0.2, so that I'd like to hear a little bit more about what kind of problem does it cause. The Cygwin64 support was submitted by Cygwin maintainer, and no additional issues were reported.

[openssl-dev] [openssl.org #3535] Resolved: TS high-precision time malformation

2014-12-05 Thread Michal Bozon via RT
.. credits should really go (if) to V. Smotlacha in the first place (and I wonder, why the original Cc header was not preserved) MB ___ openssl-dev mailing list openssl-dev@openssl.org https://mta.opensslfoundation.net/mailman/listinfo/openssl-dev