[openssl.org #2728] [Bug] Regression in OpenSSL 1.0.0e causes bad_record_mac with the padlock engine set

2012-02-25 Thread JM via RT
The regression remains in OpenSSL 1.0.1-beta3. __ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager

Re: Accessing ENGINESDIR value

2012-02-25 Thread Roumen Petrov
Hi Dmitry, Dmitry Belyavsky wrote: Greetings! What is the correct way to get the ENGINESDIR value It is defined in opensslconf.h but it is not enough to include opensslconf.h to get it defined. Why engine directory for openssl configuration is so important ? Engine installation may depend

Re: Accessing ENGINESDIR value

2012-02-25 Thread Dmitry Belyavsky
Greetings! On Sat, Feb 25, 2012 at 4:23 PM, Roumen Petrov open...@roumenpetrov.info wrote: Hi Dmitry, Dmitry Belyavsky wrote: Greetings! What is the correct way to get the ENGINESDIR value  It is defined in opensslconf.h but it is not enough to include opensslconf.h to get it defined.

[openssl.org #2731] Bug in OpenSSL 1.0.0g

2012-02-25 Thread David L. Berger via RT
The header file crypto/pem/pem.h is missing the empty macro: DECLARE_PEM_write_fp_const(name, type) /**/ It should be on line 328. crypto/cryptlib.c fails to compile if no-fp_api is configured due to it's reliance on stderr. crypto/des/read2pwd.c fails to compile if no-fp_api is configured due

[openssl.org #2732] Bug: verification fails if muliple certification path (EV/Verisign)

2012-02-25 Thread Steffen Ullrich via RT
Hi, we get the following verification problem in our product, because some servers like signin.ebay.de, comdirect.de or meine.deutsche-bank.de add additional certicates to the chain, which are needed for some clients but not for others. Unfortunatly these are not minor companies and all of the

Re: [openssl.org #2730] [PATCH] solving #2670 BUG

2012-02-25 Thread Michael Tuexen
On Feb 25, 2012, at 12:01 AM, Arpadffy Zoltan wrote: Hello, BTW: Isn't SCTP support off by default (at least this is what is intended)? No, it is unfortunately not off by default. ... but applying the following patch OPENSSL_NO_SCTP is easily made default. File