[openssl.org #2105] Please reconsider the client side of the CVE-2009-3555 fix in 1.0.0

2014-08-09 Thread Stephen Henson via RT
On Sat Aug 09 05:36:56 2014, rsalz wrote: Thomas and Stephen, can you review the history of this and decide? Closing ticket. This was resolved long ago by the option SSL_OP_LEGACY_SERVER_CONNECT Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now

[LibReSSL] Allow key generation to use arbitrary public exponents

2014-08-09 Thread Benny Baumann
Hi, I'd like to propose to include the following additional two command line arguments for the openssl binary when creating RSA keys. While the patch is written to apply to LibReSSL 2.0.5 it should apply to genrsa.c of OpenSSL 1.0.1 just fine too. While the default of 65537 is a sane default

OpenSSL Android lib

2014-08-09 Thread Randolph
Hello, is there any certified lib binary for android of OpenSSL? Thanks for providing that and fixing the errors. Randolph __ OpenSSL Project http://www.openssl.org Development Mailing List

Re: [LibReSSL] Allow key generation to use arbitrary public exponents

2014-08-09 Thread Annie Yousar
Hi Ben, you can generate keys with arbitrary exponents using the genpkey command: openssl genpkey -algorithm rsa \ -pkeyopt rsa_keygen_bits:16384 -pkeyopt rsa_keygen_pubexp:4711 Regards, Ann. Am 09.08.2014 15:21, schrieb Benny Baumann: Hi, I'd like to propose to include the following

Re: OpenSSL Android lib

2014-08-09 Thread Matt Caswell
On 09/08/14 18:31, Randolph wrote: Hello, is there any certified lib binary for android of OpenSSL? Thanks for providing that and fixing the errors. Randolph We do not certify any binaries. OpenSSL only provides sources. Jeff Walton has provided some instructions for building OpenSSL on