RAND_Status lock

2002-06-14 Thread David Pineda
I'm using a DLL that encrypt/Decrypt files, when I execute the DLL using a foreground application works, but when I execute the DLL running under a background program It is locking calling RAND_Status function. This is under WinNT environment, I use the DLL in services and ATL COM Servers and

Re: [openssl.org #96] bug in config script (gcc 3.1)

2002-06-14 Thread Richard Levitte - VMS Whacker
In message [EMAIL PROTECTED] on Thu, 13 Jun 2002 14:52:11 -0700, Allen Hopkins [EMAIL PROTECTED] said: allenh I'm afraid this was not a fix. Have you tried it with gcc-3.1? allenh I encountered this problem with the 0.9.6d snapshot. I tried it just now, GCCVER becamse 31, and my output was

Re: [openssl.org #85] 0.9.7 prototype constification problems

2002-06-14 Thread Avery Pennarun
On Thu, Jun 13, 2002 at 01:26:42PM +0200, Bodo Moeller via RT wrote: [[EMAIL PROTECTED] - Thu Jun 6 18:39:34 2002]: It appears the openssl guys goofed in 0.97beta. The prototype for the d2i_RSAPrivateKey function in 0.9.6c, which I use, is like this: d2i_RSAPrivateKey(RSA **a,

Re: [openssl.org #96] bug in config script (gcc 3.1)

2002-06-14 Thread Richard Levitte - VMS Whacker via RT
In message [EMAIL PROTECTED] on Thu, 13 Jun 2002 14:52:11 -0700, Allen Hopkins [EMAIL PROTECTED] said: allenh I'm afraid this was not a fix. Have you tried it with gcc-3.1? allenh I encountered this problem with the 0.9.6d snapshot. I tried it just now, GCCVER becamse 31, and my output was

Re: [openssl.org #65] Ticket Resolved

2002-06-14 Thread Bodo Moeller
On Thu, Jun 13, 2002 at 06:05:34PM +0200, Kambez Sadeq via RT wrote: Any idea why web browsers such as MSIE and Opera work okay with the server? I'm guessing that these browsers ignore invalid records. No, the server (actually a broken proxy to a real server apparently) does not send

Re: [openssl.org #85] 0.9.7 prototype constification problems

2002-06-14 Thread Avery Pennarun via RT
On Thu, Jun 13, 2002 at 01:26:42PM +0200, Bodo Moeller via RT wrote: [[EMAIL PROTECTED] - Thu Jun 6 18:39:34 2002]: It appears the openssl guys goofed in 0.97beta. The prototype for the d2i_RSAPrivateKey function in 0.9.6c, which I use, is like this: d2i_RSAPrivateKey(RSA **a,

Re: getpid()

2002-06-14 Thread Bodo Moeller
On Thu, Jun 13, 2002 at 05:20:42PM +0100, Ben Laurie wrote: However, the number of calls is astonishing - and must be significantly expensive, too. Memory debugging *is* expensive. It is only enabled by default in debug configurations, where (starting with 0.9.7) it can be disabled by

[openssl.org #97] About 0.9.6a(b) and des_encrypt1()

2002-06-14 Thread Jani Taskinen via RT
From CHANGES: *) Rename 'des_encrypt' to 'des_encrypt1'. This avoids the clashes with des_encrypt() defined on some operating systems, like Solaris and UnixWare. [Richard Levitte] Just wanted to let you guys know, that also this symbol is in use by

Re: [openssl.org #97] About 0.9.6a(b) and des_encrypt1()

2002-06-14 Thread Geoff Thorpe via RT
On Wed, 8 Aug 2001, [iso-8859-1] Götz Babin-Ebell wrote: Richard Levitte - VMS Whacker wrote: Hmm, it feels like it's really time for a rename (basically, change des to DES in all names, and thereby follow the convention used everywhere else in OpenSSL), or this becomes an impossible

Re: [openssl.org #97] About 0.9.6a(b) and des_encrypt1()

2002-06-14 Thread Götz Babin-Ebell via RT
Richard Levitte - VMS Whacker wrote: From: Jani Taskinen [EMAIL PROTECTED] sniper From CHANGES: sniper sniper *) Rename 'des_encrypt' to 'des_encrypt1'. This avoids the clashes sniper with des_encrypt() defined on some operating systems, like Solaris sniper and

Re: [openssl.org #97] About 0.9.6a(b) and des_encrypt1()

2002-06-14 Thread Richard Levitte - VMS Whacker via RT
From: Jani Taskinen [EMAIL PROTECTED] sniper From CHANGES: sniper sniper *) Rename 'des_encrypt' to 'des_encrypt1'. This avoids the clashes sniper with des_encrypt() defined on some operating systems, like Solaris sniper and UnixWare. sniper [Richard Levitte]

[openssl.org #97] About 0.9.6a(b) and des_encrypt1()

2002-06-14 Thread Lutz Jaenicke via RT
[[EMAIL PROTECTED] - Fri Jun 14 12:02:20 2002]: From CHANGES: *) Rename 'des_encrypt' to 'des_encrypt1'. This avoids the clashes with des_encrypt() defined on some operating systems, like Solaris and UnixWare. [Richard Levitte] Just wanted

Re: About the des_encrypt1() problem with Solaris..

2002-06-14 Thread Lutz Jaenicke
On Thu, Jun 13, 2002 at 10:58:43PM +0300, Jani Taskinen wrote: This problem described here: http://marc.theaimsgroup.com/?l=openssl-devm=99720385817987w=2 Still exists in 0.9.6d release..when can this be expected to be fixed? As you will note, I have injected the old

[openssl.org #87] Ticket #87, #90 resolved (empty fragments for CBC)

2002-06-14 Thread Bodo Moeller via RT
The CBC vulnerability countermeasure that cannot be handled by some broken SSL/TLS implementations can now be disabled with the new SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS option, which is also part of SSL_OP_ALL and thus will be automatically enabled in many OpenSSL applications designed to be

[openssl.org #65] 0.9.6d: SSL3_GET_RECORD:wrong version number

2002-06-14 Thread Bodo Moeller via RT
Status was (automatically?) changed from resolved to open by additional correspondance. The actual status is resolved. __ OpenSSL Project http://www.openssl.org Development Mailing List

[openssl.org #34] SSL through Netscape Proxy server

2002-06-14 Thread Bodo Moeller via RT
Not a bug in OpenSSL, should have been sent to openssl-users __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager

[openssl.org #27] Legalizing OpenSSL in France

2002-06-14 Thread Bodo Moeller via RT
Not an OpenSSL bug, this should be discussed elsewhere (openssl-users). __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List

Re: [openssl.org #87] openssl 0.9.6b to 0.9.6d with IE5.5 and IE6 and 3DES-CBC-SHA hangs

2002-06-14 Thread \\ E.I.Sarmas \ via RT\
Dear Mr. Moeller, I totally agree that it is an IE bug but unfortunately we have to live with IE(!) and so by Microsoft doctrine (!) it's the other programs that interact with IE that have bugs ... Seriously, I wish to thank you and the other people in the ssl development team for your effort

Linking the libraries.

2002-06-14 Thread Henri van Riel
Hello, I'm new to openssl (sort of) and I have a problem/question. I am trying to compile fetchmail-5.9.12 with ssl support but something strange is happening. Compilation goes ok but when it's all done I do a 'ldd ./fetchmail' and it turns out the libraries are dynamically linked to the

Re: [openssl.org #97] About 0.9.6a(b) and des_encrypt1()

2002-06-14 Thread Jani Taskinen via RT
On Fri, 14 Jun 2002, Lutz Jaenicke via RT wrote: [[EMAIL PROTECTED] - Fri Jun 14 12:02:20 2002]: From CHANGES: *) Rename 'des_encrypt' to 'des_encrypt1'. This avoids the clashes with des_encrypt() defined on some operating systems, like Solaris and UnixWare.

Re: [openssl.org #96] bug in config script (gcc 3.1)

2002-06-14 Thread Allen Hopkins via RT
Richard- Strange. I guess it's time to compare what we're looking at. I'm running on a Sun Ultra-60 w/ SunOS 5.8. I downloaded openssl-0.9.6d.tar.gz from http://www.openssl.org/source/. I then ran the following command: ./config --prefix=/usr/local/openssl-0.9.6d \

problem config

2002-06-14 Thread Eric Vanborren
Hi openssl-dev, ~~/src/openssl-0.9.6d.src root@galilee gcc --version gcc (GCC) 3.1 Copyright (C) 2002 Free Software Foundation, Inc. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. vi config

Re: [openssl.org #96] bug in config script (gcc 3.1)

2002-06-14 Thread Allen Hopkins
Richard- Strange. I guess it's time to compare what we're looking at. I'm running on a Sun Ultra-60 w/ SunOS 5.8. I downloaded openssl-0.9.6d.tar.gz from http://www.openssl.org/source/. I then ran the following command: ./config --prefix=/usr/local/openssl-0.9.6d \

[openssl.org #89] missing prototypes for functions

2002-06-14 Thread Lutz Jaenicke via RT
Ok, I have now finished applying the patches including the changed prototypes for ASN1 using the DECLARE macro. Please test the next snapshot (or beta2, which will probably be built on Sunday evening). Best regards, Lutz

[openssl.org #96] problem config

2002-06-14 Thread Eric Vanborren via RT
Hi openssl-dev, ~~/src/openssl-0.9.6d.src root@galilee gcc --version gcc (GCC) 3.1 Copyright (C) 2002 Free Software Foundation, Inc. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. vi config

Re: can't compile on solaris 9 - gcc

2002-06-14 Thread Lutz Jaenicke
On Thu, Jun 13, 2002 at 03:46:42PM +, Gustavo A. Baratto wrote: I'm not being successful in compiling openssl-0.9.6d on solaris 9 with gcc 3.1. We are aware that problems exist with respect to GCC 3.1. Several different changes to config have been proposed and one fix has already been

[openssl.org #96] bug in config script (gcc 3.1)

2002-06-14 Thread Lutz Jaenicke via RT
Different solutions have been proposed and I am not sure whether the currently checked in version will finally work. I am not sure for how long -dumpversion was supported (at least since 1994 as was reported) and I strongly consider to use -dumpversion. Richard: you seem to have a beta version

Re: [openssl.org #97] About 0.9.6a(b) and des_encrypt1()

2002-06-14 Thread Lutz Jaenicke via RT
On Fri, Jun 14, 2002 at 08:34:06PM +0200, Jani Taskinen via RT wrote: On Fri, 14 Jun 2002, Lutz Jaenicke via RT wrote: This problem has been resolved for 0.9.7... Great. Is it worthwile to make a small adjustment for 0.9.6e (in case it will be released)? If 0.9.7 is due to

Re: [openssl.org #96] bug in config script (gcc 3.1)

2002-06-14 Thread Allen Hopkins via RT
I agree that simply using -dumpversion makes more sense, on the assumption that it will always only output the number. --version appears to be intended to be human-readable, not machine-readable, and its format may change at any time, as it just did. Why keep adding sed commands that say, oh,

OpenSSL engine ctrl: handling of strings

2002-06-14 Thread Gtz Babin-Ebell
Hello folks, There is a possible problem with the string param handling of ENGINE_ctrl(): (At least I will get a problem...) In the ..._ctrl()-Function of the engines a passed string is only referenced and not copyed. This is bad if the buffer with the passed data is overwritten... Since in

[openssl.org #98] OpenSSL engine ctrl: handling of strings

2002-06-14 Thread Götz Babin-Ebell via RT
__ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

Re: can't compile on solaris 9 - gcc

2002-06-14 Thread Gustavo A. Baratto
Thank you for your answer... I got the latest CVS and the config works fine now. great work you guys are doing. On Fri, 2002-06-14 at 19:09, Lutz Jaenicke wrote: On Thu, Jun 13, 2002 at 03:46:42PM +, Gustavo A. Baratto wrote: I'm not being successful in compiling openssl-0.9.6d on

Re: [openssl.org #97] About 0.9.6a(b) and des_encrypt1()

2002-06-14 Thread Jani Taskinen via RT
On Fri, 14 Jun 2002, Lutz Jaenicke via RT wrote: There will not be another release of 0.9.6 before 0.9.7 will be out. We still maintain the 0.9.6 tree, because we anticipate that due to incompatible changes between 0.9.6 and 0.9.7 several people will stay with 0.9.6x for some more time, so we

[openssl.org #97] About 0.9.6a(b) and des_encrypt1()

2002-06-14 Thread Lutz Jaenicke via RT
[[EMAIL PROTECTED] - Fri Jun 14 22:02:06 2002]: On Fri, 14 Jun 2002, Lutz Jaenicke via RT wrote: There will not be another release of 0.9.6 before 0.9.7 will be out. We still maintain the 0.9.6 tree, because we anticipate that due to incompatible changes between 0.9.6 and 0.9.7 several

Re: cvs commit: openssl/crypto/evp c_all.c evp.h

2002-06-14 Thread Richard Levitte - VMS Whacker
In message [EMAIL PROTECTED] on Fri, 14 Jun 2002 20:59:59 +0200 (MET DST), [EMAIL PROTECTED] said: jaenicke diff -u -r1.7.8.1 -r1.7.8.2 jaenicke --- c_all.c 2002/02/23 02:09:25 1.7.8.1 jaenicke +++ c_all.c 2002/06/14 18:59:53 1.7.8.2 jaenicke @@ -61,6 +61,7 @@ jaenicke

Re: [openssl.org #96] bug in config script (gcc 3.1)

2002-06-14 Thread Richard Levitte - VMS Whacker
In message [EMAIL PROTECTED] on Fri, 14 Jun 2002 21:14:43 +0200 (METDST), Lutz Jaenicke via RT [EMAIL PROTECTED] said: rt Richard: you seem to have a beta version of 3.1.1 around. Will its rt output for -dumpversion somehow fit into the model? : ; gcc -dumpversion 3.1.1 I see no problem.

Re: [openssl.org #75] DJGPP (DOS) Patch for 0.9.7

2002-06-14 Thread Doug Kaufman
On Thu, 13 Jun 2002, Doug Kaufman wrote: On Thu, 13 Jun 2002, Richard Levitte via RT wrote: I finally committed most of your changes. Please download the next snapshot of 0.9.7 and check that it works as intended. I'm keeping this ticket open until you have confirmed that it works

Re: [openssl.org #75] DJGPP (DOS) Patch for 0.9.7

2002-06-14 Thread Doug Kaufman
On Fri, 14 Jun 2002, Doug Kaufman wrote: With this patch, the snapshot from 13 June does Configure, make, and make test without problems under DJGPP. make depend also completes without warnings, but it doesn't seem necessary to run it. Patch attached to avoid problems with long lines in