[PATCH] VxWorks PowerPC 860 and no-md2

2003-09-27 Thread Bob Bradley
The attached patch adds Configure script support for VxWorks for PowerPC 860, fixes a compile problem with VxWorks builds, and fixes build problems with no-md2. diff -ur openssl-orig/Configure openssl-work/Configure --- openssl-orig/Configure 2003-04-09 22:46:55.0 -0700 +++

Re: [PATCH] VxWorks PowerPC 860 and no-md2

2003-09-27 Thread Richard Levitte - VMS Whacker
In message [EMAIL PROTECTED] on Fri, 26 Sep 2003 23:16:39 -0700, Bob Bradley [EMAIL PROTECTED] said: bob The attached patch adds Configure script support for VxWorks for PowerPC bob 860, fixes a compile problem with VxWorks builds, and fixes build problems bob with no-md2. I've applied your

Re: OpenSSL with KRB5 support, memory leak kssl_ctx_new()

2003-09-27 Thread Richard Levitte - VMS Whacker
In message [EMAIL PROTECTED] on Fri, 26 Sep 2003 16:27:38 -0400, Andrew Mann [EMAIL PROTECTED] said: amann ssl_lib.c function SSL_free() does not appear to free this memory. amann amann As a note, the system libraries here are openssl 0.9.7a, but I'm amann looking through the 0.9.7b source

[openssl.org #699] Little problem compiling without MD2 support

2003-09-27 Thread via RT
In test/md2test.c there is a little problem. The line : #include openssl/md2.h should be in the else side of #ifdef OPENSSL_NO_MD2, otherwise the make would stop with and error. The openSSL version is 0.9.7b Here How I fixed ( I know, it's simple, but should work ) ---

[openssl.org #698] documentation bug fix for openssl-0.9.7b

2003-09-27 Thread Richard Levitte via RT
Applied. Thanks. Ticket resolved. [EMAIL PROTECTED] - Fri Sep 26 08:50:39 2003]: INSTALL.W32 228c228 $ copy /b inc32\* c:\openssl\include\openssl --- $ copy /b inc32\openssl\* c:\openssl\include\openssl -- Richard Levitte [EMAIL PROTECTED]

[openssl.org #693] [PATCH] Ensure OpenSSL stores Kerberos principal's instance

2003-09-27 Thread Richard Levitte via RT
I just applied your patch in the 0.9.7 and the 0.9.8-dev branches. Please test tomorrow's snapshot. Thanks for your contribution. Ticket resolved. [EMAIL PROTECTED] - Mon Sep 22 21:37:29 2003]: !DOCTYPE html PUBLIC -//W3C//DTD HTML 4.01 Transitional//EN html head title/title /head

[openssl.org #692] off-by-one bugs

2003-09-27 Thread Richard Levitte via RT
This has already been corrected, please check a recent snapshot of OpenSSL. Thanks still. Ticket resolved. [EMAIL PROTECTED] - Fri Sep 19 21:06:59 2003]: (Excuse the filenames, patch generated from OpenBSD -current sources.) Index: lib/libssl/src/apps/openssl.c

[openssl.org #688] openssl+QNX6.2.1 - HELP PLEASE

2003-09-27 Thread Richard Levitte via RT
OK, we need to know a few details to enable that: - How does on tell the cc that it should produce position independent code (PIC)? - How does one build a shared library, preferably from a static library? - Does QNX use dlopen() and friends to load shared libraries, or some other mechanism?

[openssl.org #685] bio.h + intel Compiler request

2003-09-27 Thread Richard Levitte via RT
I did it better: I just removed the extra arguments from all the BIO_printfs in apps/pkcs8.c that had it. Please try tomorrow's snapshot. Thank you. Ticket resolved. [EMAIL PROTECTED] - Wed Sep 10 08:08:57 2003]: Hi, can you add #ifdef __INTEL_COMPILER #pragma warning (disable:268)

[openssl.org #680] minor bug in ssl3_send_certificate_request()

2003-09-27 Thread Richard Levitte via RT
I see no harm in that patch, and it makes ssl3_send_certificate_request() consistent with all the other similar functions, so I applied it. Thanks. Ticket resolved. Please try the next snapshot. [EMAIL PROTECTED] - Thu Aug 21 07:38:18 2003]: In function ssl3_send_certificate_request(), the

[openssl.org #679] minor bug in ssl3_send_client_verify()

2003-09-27 Thread Richard Levitte via RT
Same argument as for ticket 680: no harm done, and makes this function consistent with the rest of them. Applied. Thanks. Ticket resolved. [EMAIL PROTECTED] - Thu Aug 21 07:38:16 2003]: In function ssl3_send_client_verify(), the state is never switched to SSL3_ST_CW_CERT_VRFY_B after the

[openssl.org #678] Crash in lhash code in openssl 0.9.7a

2003-09-27 Thread Richard Levitte via RT
It seems to me that adding a reference counter is a bit better. This means that we need to have one extra function (and callback) to release a pointer (and thereby decreas the reference count). I'm experimenting with that approach as I write, and I'm going to release soon unless someone sees a

[openssl.org #678] Crash in lhash code in openssl 0.9.7a

2003-09-27 Thread Richard Levitte via RT
OK, just implemented and committed. Please try tomorrow's snapshot. I'm not releasing this ticket yet, as I suspect there may be discussions about this change... [levitte - Sat Sep 27 22:19:53 2003]: It seems to me that adding a reference counter is a bit better. This means that we need to

[openssl.org #676] Small OpenSSL

2003-09-27 Thread Richard Levitte via RT
I've a small comment to contribute first, then I'll go through the rest of your contribution. [EMAIL PROTECTED] - Thu Aug 14 17:33:20 2003]: - Do not suppress TLS when Diffie-Hellman is excluded. RFC2246 says the following: 9. Mandatory Cipher Suites In the absence of an application

[openssl.org #675] Error 140890B2:SSL

2003-09-27 Thread Richard Levitte via RT
Here's how you find out what the error code means: openssl errstr 140890B2 I got the following: error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned This means the server or the JServlet has been configured to require the client to submit a client certificate,

[openssl.org #670] -fPIC flag missing for asm/des_enc-sparc.

2003-09-27 Thread Richard Levitte via RT
Uhmm, which OpenSSL version are you talking about? I can't find des_enc-sparc.S anywhere in my copy of the 0.9.7 branch... [EMAIL PROTECTED] - Tue Jul 29 17:06:13 2003]: it seems that in the current snapshots the shared option for solaris does not work correctly. Compilation in

[openssl.org #669] select patches for DOS

2003-09-27 Thread Richard Levitte via RT
I applied your changes to 0.9.8-dev and 0.9.7-stable. Thank you. Ticket resolved. [EMAIL PROTECTED] - Tue Jul 29 09:10:37 2003]: These are my patches to get openssl s_client working on MSDOS / djgpp / Watt-32. The assumtion that DOS in general can do select() on stdin/stdout is wrong

[openssl.org #664] Bug in md5 calculation

2003-09-27 Thread Richard Levitte via RT
I did as you suggested and changed jge to jae in the branches 0.9.8-dev, 0.9.7-stable and 0.9.6-stable. Please test tomorrow's snapshots. Thanks for your contribution. Ticket resolved. [EMAIL PROTECTED] - Tue Jul 22 10:52:32 2003]: When calling the MD5 function on very large data sets

[openssl.org #359] Calling SSL_read and SSL_write with non-empty error stack may cause an error

2003-09-27 Thread Richard Levitte via RT
OK, what's the status on this ticket? [bodo - Tue Feb 4 17:30:23 2003]: Arne Ansper [EMAIL PROTECTED]: Like I say, they should only do this if there was an error reported, surely? No. Take a look at the SSL_CTX_use_certificate_chain_file: ret=SSL_CTX_use_certificate(ctx,x);

[openssl.org #661] bug in x509_vfy.c

2003-09-27 Thread Richard Levitte via RT
I'll look at it in a few days. Right now, I feel unsure about all the implications of such a change. [EMAIL PROTECTED] - Fri Jul 11 21:14:39 2003]: OPENSSL VERSION: 0.9.6j PLATFORM: all SEVERITY: minor In x509_vfy.c:X509_verify_cert, there are some cases where an error occurs and

[openssl.org #657] v3_prn.c cosmetical bug/patch

2003-09-27 Thread Richard Levitte via RT
I've applied the changes 1, but not for 2, which I didn't quite understand. [EMAIL PROTECTED] - Thu Jul 10 08:44:40 2003]: Hi I think there are 2 cosmetical bugs in v3_prn.c. 1.) The indentation of the v3 extension values is fix '12' instead of 'indent + 4' 2.) After the last

[openssl.org #640] bug: Makefile.ssl for do_srv3-shared and do_svr5-shared buggy

2003-09-27 Thread Richard Levitte via RT
I haven't heard anything further on this, or at least, I can't see it in this database... [levitte - Thu Jul 3 23:41:28 2003]: Since all lines returned by find will contain at least one slash, the obvious solution is to add a slash in the argument to grep, thus doing grep /$$obj allobjs

Re: [openssl.org #669] select patches for DOS

2003-09-27 Thread [EMAIL PROTECTED] via RT
On Sat, 27 Sep 2003, Richard Levitte via RT wrote: I applied your changes to 0.9.8-dev and 0.9.7-stable. Thank you. Ticket resolved. [EMAIL PROTECTED] - Tue Jul 29 09:10:37 2003]: These are my patches to get openssl s_client working on MSDOS / djgpp / Watt-32. The patch was