[openssl-dev] internationalized passwords for pkcs#8, pkcs#12 files

2017-04-05 Thread Nikos Mavrogiannopoulos
Hi, I would like to eliminate the ambiguities concerning internationalized passwords in PKCS#8 and PKCS#12 files. I plan to propose an update to the PKCS#5, PKCS#12 documents mandating UTF-8 and requiring the RFC7613 OpaqueString profile. I'm interested on openssl developers opinion on the

[openssl-dev] Code Health Tuesday - test modernisation

2017-04-05 Thread Paul Dale
Next week on the 11th of April it is Code Health Tuesday again. This fortnight it will be about updating the C unit tests to use the test framework. Everyone is invited to participate to help bring consistency and order to the unit tests.

[openssl-dev] Testing CVE-2016-6309

2017-04-05 Thread Lysoněk Milan
Hello, I'd like to make test for CVE-2016-6309 https://www.openssl.org/news/secadv/20160926.txt in tlsfuzzer. I tried combining and sending different lengths (from small lengths to large) of application data and padding, but I could not trigger this issue on mentioned OpenSSL 1.1.0a. Is

Re: [openssl-dev] Testing CVE-2016-6309

2017-04-05 Thread Matt Caswell
On 05/04/17 19:24, Lysoněk Milan wrote: > Hello, > I'd like to make test for CVE-2016-6309 > https://www.openssl.org/news/secadv/20160926.txt in tlsfuzzer. I tried > combining and sending different lengths (from small lengths to large) of > application data and padding, but I could not trigger