[openssl-dev] HELP NEEDED FOR CROSS-COMPILING OPENSSL (LIBSSL AND LIBCRYPTO) ON UBUNTU FOR MIPS (SYSTEM ON CHIP BROADCOM BCM6358 [ROUTER NETGEAR DGN2200V1])

2015-06-15 Thread Storm Seeker
Good morning everybody and nice to meet you I've been struggling to get this done for entire weeks and long nights, but I weren't able to. I need to CROSS-COMPILE OPENSSL (LIBSSL AND LIBCRYPTO) ON UBUNTU FOR MIPS (SYSTEM ON CHIP BROADCOM BCM6358 [ROUTER NETGEAR DGN2200V1]). I'm able to compile

Re: [openssl-dev] [openssl.org #3908] Patch fixing some heartbeat issues (vs latest git master)

2015-06-15 Thread Michael Tuexen
On 15 Jun 2015, at 10:35, Matt Caswell m...@openssl.org wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 13/06/15 14:43, Hanno Böck wrote: Serious question: Is there any valid use case for heartbeats in TLS or DTLS? (With valid use case I mean something like I use it for this

Re: [openssl-dev] [openssl.org #3905] Bug report: segfault while cleaning up in libgost

2015-06-15 Thread bug-reporting0...@cneufeld.ca via RT
On Mon, 15 Jun 2015 03:29:12 +, Rich Salz via RT r...@openssl.org said: It's strange that CRYPTO_malloc ends up calling ISC-malloc, but CRYPTO_free does not. This is strange, but really hard to see how this is an openssl issue. OK, I've been poking at this a bit more. The ISC bind's

Re: [openssl-dev] available tests drivers for OpenSSL

2015-06-15 Thread Hubert Kario
On Monday 15 June 2015 12:14:47 Pascal Cuoq wrote: Hello, I am working on a C interpreter that uses existing tests to find more issues than simple execution does. In that it is comparable to Valgrind or UBSan. It has different enough strengths and weaknesses compared to these existing tools

Re: [openssl-dev] available tests drivers for OpenSSL

2015-06-15 Thread Kurt Roeckx
On Mon, Jun 15, 2015 at 12:14:47PM +, Pascal Cuoq wrote: Hello, I am working on a C interpreter that uses existing tests to find more issues than simple execution does. In that it is comparable to Valgrind or UBSan. It has different enough strengths and weaknesses compared to these

[openssl-dev] [openssl.org #3588] obsolete comment for SSL_set_accept_state and SSL_set_connect_state

2015-06-15 Thread Rich Salz via RT
commit d31fb0b5b341aa7883b487d07e6a56d216224e25 Author: Rich Salz rs...@akamai.com Date: Sat Jun 13 10:50:00 2015 -0400 Refactor into clear_ciphers; RT3588 While closing RT3588 (Remove obsolete comment) Kurt and I saw that a few lines to completely clear the SSL cipher state could be moved into

[openssl-dev] available tests drivers for OpenSSL

2015-06-15 Thread Pascal Cuoq
Hello, I am working on a C interpreter that uses existing tests to find more issues than simple execution does. In that it is comparable to Valgrind or UBSan. It has different enough strengths and weaknesses compared to these existing tools to make it worth using in addition to them, too.

Re: [openssl-dev] [openssl.org #3911] 1.0.2c: some kind of regression - fails to connect to server where 1.0.2a works fine

2015-06-15 Thread Tomas Mraz via RT
On Po, 2015-06-15 at 14:22 +, Arkadiusz Miskiewicz via RT wrote: Hello. I've just upgraded from 1.0.2a to 1.0.2c and now I no longer can connect from mysql client to my mysql server. Downgrading to 1.0.2a and the problem is gone. That's because mysql server hardcodes 512 bits DH

Re: [openssl-dev] [openssl.org #3911] 1.0.2c: some kind of regression - fails to connect to server where 1.0.2a works fine

2015-06-15 Thread Todd Farmer
Hello Arkadiusz, On 6/15/2015 8:22 AM, Arkadiusz Miskiewicz via RT wrote: I've just upgraded from 1.0.2a to 1.0.2c and now I no longer can connect from mysql client to my mysql server. Downgrading to 1.0.2a and the problem is gone. 1.0.2c: $ mysql -u user -p -h host Enter password:

Re: [openssl-dev] Help needed for cross-compiling openssl

2015-06-15 Thread stefan.n...@t-online.de
Hi, For other programs, after setting the environment variables according to this guide, it is enough to run: ./configure --host=mips-linux make I really need your help, because it doesn't wotk with OPENSSL. That's because OpenSSL is not using

Re: [openssl-dev] [openssl.org #3911] 1.0.2c: some kind of regression - fails to connect to server where 1.0.2a works fine

2015-06-15 Thread Tomas Mraz
On Po, 2015-06-15 at 14:22 +, Arkadiusz Miskiewicz via RT wrote: Hello. I've just upgraded from 1.0.2a to 1.0.2c and now I no longer can connect from mysql client to my mysql server. Downgrading to 1.0.2a and the problem is gone. That's because mysql server hardcodes 512 bits DH

Re: [openssl-dev] [openssl.org #3911] 1.0.2c: some kind of regression - fails to connect to server where 1.0.2a works fine

2015-06-15 Thread Todd Farmer via RT
Hello Arkadiusz, On 6/15/2015 8:22 AM, Arkadiusz Miskiewicz via RT wrote: I've just upgraded from 1.0.2a to 1.0.2c and now I no longer can connect from mysql client to my mysql server. Downgrading to 1.0.2a and the problem is gone. 1.0.2c: $ mysql -u user -p -h host Enter password:

[openssl-dev] ARM optimised montgomery multiplication (armv4-mont)

2015-06-15 Thread Jonathan Larmour
Hi, After the changes to DH requiring longer key lengths, I switched to 2048-bit keys, but was finding this was now making my test runs on an embedded ARM9 target annoyingly slow; so thought I'd investigate to see if there was anything to improve. With some experimentation, it turns out that if

Re: [openssl-dev] Self-initialization of locking/threadid callbacks and auto-detection of features

2015-06-15 Thread Nico Williams
On Thu, Jun 11, 2015 at 10:41:58AM +0200, Florian Weimer wrote: Detecting things in libcrypto is very difficult on GNU/Linux due to the way dynamic linking works. Details? On GNU/Linux, you should try very hard to avoid linking -lpthread and restrict yourself to the pthreads API subset which

Re: [openssl-dev] available tests drivers for OpenSSL

2015-06-15 Thread Andrejs Igumenovs
Hi Pascal, There is also this one: http://drmemory.org/ - Andrejs On 15.06.2015, at 15:14, Pascal Cuoq c...@trust-in-soft.com wrote: Hello, I am working on a C interpreter that uses existing tests to find more issues than simple execution does. In that it is comparable to Valgrind or

[openssl-dev] [openssl.org #3911] 1.0.2c: some kind of regression - fails to connect to server where 1.0.2a works fine

2015-06-15 Thread Arkadiusz Miskiewicz via RT
Hello. I've just upgraded from 1.0.2a to 1.0.2c and now I no longer can connect from mysql client to my mysql server. Downgrading to 1.0.2a and the problem is gone. 1.0.2c: $ mysql -u user -p -h host Enter password: ERROR 2026 (HY000): SSL connection error:

Re: [openssl-dev] Self-initialization of locking/threadid callbacks and auto-detection of features

2015-06-15 Thread Nico Williams
On Mon, Jun 15, 2015 at 06:19:49PM +, Salz, Rich wrote: My overall goal is that I want to remove the thread callback stuff. Excellent. Ideally we have two options: no threads and system-threads. Presumably that would be either a configure-time option or a run-time automatic option, but

Re: [openssl-dev] Self-initialization of locking/threadid callbacks and auto-detection of features

2015-06-15 Thread Salz, Rich
My overall goal is that I want to remove the thread callback stuff. Ideally we have two options: no threads and system-threads. It seems that on Linux shared/static libraries might be an issue. I hope we can resolve and simplify that. ___

Re: [openssl-dev] Regression testing?

2015-06-15 Thread Valerie Fenwick
On 6/13/2015 7:11 AM, Salz, Rich wrote: I was wondering if there is a document anywhere describing what type of testing you do before releasing a new version of OpenSSL? Matt already gave some answers. Our biggest regression test is make test at the top-level. We've recently gotten much

Re: [openssl-dev] Self-initialization of locking/threadid callbacks and auto-detection of features

2015-06-15 Thread Nico Williams
Hmm, another option is to use weak symbols to detect presence of pthreads. This should work regardless of whether static or dynamic linking is used. A statically-linked, single-threaded program that dlopen()s an object that brings in libpthread will have different OpenSSL dependencies for the

Re: [openssl-dev] [openssl.org #3905] Bug report: segfault while cleaning up in libgost

2015-06-15 Thread bug-reporting0...@cneufeld.ca via RT
OK, it's a build system issue. The erroneously linked symbols do not appear in libgost.so unless make is invoked with the -j NUM switch. I'll see later if I can make a patch to fix the parallel build behaviour. -- Christopher Neufeld Home page: http://www.cneufeld.ca/neufeld Don't edit

Re: [openssl-dev] [openssl.org #3908] Patch fixing some heartbeat issues (vs latest git master)

2015-06-15 Thread Matt Caswell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 13/06/15 14:43, Hanno Böck wrote: Serious question: Is there any valid use case for heartbeats in TLS or DTLS? (With valid use case I mean something like I use it for this system, not answers like you could use it for xy) I had always

Re: [openssl-dev] Regression testing?

2015-06-15 Thread Salz, Rich
Thanks, very helpful! Is there a minimum number of systems/OSes this is run on before a release goes out? Some linux distro. If there are vms- or windows-specific changes in the release that the team things are of concern, we try to test those as well. Or is it always just best effort

[openssl-dev] [openssl.org #2547] [Bug report / Linux / openssl 0.9.8k-7ubuntu8.6] openssl genrsa creates world readable private key files

2015-06-15 Thread Rich Salz via RT
This is a big change, so we're only doing it in master. Fixed. -- Rich Salz, OpenSSL dev team; rs...@openssl.org ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev