Registering custom objects from dynamically-loaded engine

2004-12-03 Thread Dmitry Belyavsky
. It happens in OBJ_NAME_cleanup. It looks like OBJ_NAME_cleanup tries to free memory belongs to unloaded library. What should I do to avoid this? -- SY, Dmitry Belyavsky (ICQ UIN 6575) __ OpenSSL Project

Re: Registering custom objects from dynamically-loaded engine

2004-12-03 Thread Dmitry Belyavsky
Hello! On Fri, 3 Dec 2004, Dmitry Belyavsky wrote: I have custom dynamically-loaded engine implementing some non-standard algorithms. So I register NIDs using OBJ_create from engine bind function. Registering code looks like my_NID = OBJ_create(1.2.3.4.5,OID_example,Our example OID

Re: Registering custom objects from dynamically-loaded engine

2004-12-07 Thread Dmitry Belyavsky
out what happens. openssl req calls OBJ_cleanup() itself, but openssl dgst doesn't. -- SY, Dmitry Belyavsky (ICQ UIN 6575) __ OpenSSL Project http://www.openssl.org Development Mailing List

Memory leaks report

2005-01-17 Thread Dmitry Belyavsky
Hello! I'm using 20050117 snapshot of 0.9.8. I found out that make test detects memory leaks in test_ss test suite. Thank you. -- SY, Dmitry Belyavsky (ICQ UIN 6575) __ OpenSSL Project http

Re: [ANNOUNCE] OpenSSL 0.9.8 beta 1 released

2005-05-21 Thread Dmitry Belyavsky
the current engines except for the cryptodev one to a new directory engines/. Whether this changes affect both 0.9.8 and head branch or only one of them? Thank you! -- SY, Dmitry Belyavsky (ICQ UIN 6575) __ OpenSSL

Re: [openssl.org #1090] [BUG] Segfault in dgst signing with rsa private key

2005-06-01 Thread Dmitry Belyavsky
Hello! On Wed, 1 Jun 2005, Jostein Tveit wrote: Dmitry Belyavsky via RT [EMAIL PROTECTED] writes: I use 0.9.8-stable-SNAP-20050601 snapshot. Problem occurs on digest signing. This seems to be the same bug as I reported just a couple of hours ago on openssl-dev. (Se post with subject

Re: Prime checking fails for small primes

2005-06-05 Thread Dmitry Belyavsky
Hello! On Sat, 4 Jun 2005, Marc wrote: When I discovered that, from openssl's point of view, 67, 51, 1009, ... where not primes, 51 is not prime. -- SY, Dmitry Belyavsky (ICQ UIN 6575) __ OpenSSL Project

Re: [openssl.org #1090] [BUG] Segfault in dgst signing with rsa private key

2005-06-06 Thread Dmitry Belyavsky
suite? Thank you. -- SY, Dmitry Belyavsky (ICQ UIN 6575) __ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager

Re: XML signature and OpenSSL

2005-06-13 Thread Dmitry Belyavsky
understand something. It seems to me, XMLSec library (http://www.aleksey.com/xmlsec/) would solve your problems. -- SY, Dmitry Belyavsky (ICQ UIN 6575) __ OpenSSL Project http://www.openssl.org

Re: [openssl.org #1146] [BUG] Segfault on FreeBSD 4.8-RELEASE #0

2005-07-04 Thread Dmitry Belyavsky
Hello! Sorry, I've forgotten to mention I use 20050627 snapshot and ./config -g shared zlib works fine. On Mon, 4 Jul 2005, Dmitry Belyavsky via RT wrote: I've found a SEGFAULT using FreeBSD 4.8-RELEASE #0: Thu Apr 3 10:53:38 GMT 2003 in bntest. Build is configured with ./Configure -ggdb

Re: [openssl.org #1146] [BUG] Segfault on FreeBSD 4.8-RELEASE #0

2005-07-05 Thread Dmitry Belyavsky
to ./Configure when latter is invoked manually. Thank you, it helps. -- SY, Dmitry Belyavsky (ICQ UIN 6575) __ OpenSSL Project http://www.openssl.org Development Mailing List

Re: [openssl.org #1146] [BUG] Segfault on FreeBSD 4.8-RELEASE #0

2005-07-07 Thread Dmitry Belyavsky
0x2813332c bn_mul_add_words+700: lea0x0(%esi,1),%esi End of assembler dump. Thank you! -- SY, Dmitry Belyavsky (ICQ UIN 6575) __ OpenSSL Project http://www.openssl.org Development Mailing

Re: [openssl.org #1146] [BUG] Segfault on FreeBSD 4.8-RELEASE #0

2005-07-08 Thread Dmitry Belyavsky
condition. It might be possible to avoid the bug in OpenSSL [is it really important?]. Binutils upgrade might help [is it an option?]. Or simply avoid -ggdb... A. It's all possible and bug is not critical for us. But it happens without -ggdb too. Thank you! -- SY, Dmitry Belyavsky (ICQ UIN

Re: [PATCH] Pre-Shared Key Ciphersuites for OpenSSL

2005-08-25 Thread Dmitry Belyavsky
. We have some preliminary tested concepts regarding easy adding of extra cipher suites and we'll be happy to discuss this ideas. Thank you. -- SY, Dmitry Belyavsky (ICQ UIN 6575) __ OpenSSL Project

RE: [PATCH] Pre-Shared Key Ciphersuites for OpenSSL

2005-08-25 Thread Dmitry Belyavsky
cryptoalgorythms for encryption and MAC. So this idea at least seems to be good enough for experiments. We hope this short description is clear and will be interesting for a discussion. Thank you. -- SY, Dmitry Belyavsky (ICQ UIN 6575

RAND_pseudo_bytes() semantics

2005-10-28 Thread Dmitry Belyavsky
understanding of RAND_pseudo_bytes() semantics, or there is an error in OpenSSL? Thank you! -- SY, Dmitry Belyavsky (ICQ UIN 6575) __ OpenSSL Project http://www.openssl.org Development Mailing List

Re: [openssl.org #1231] [BUG]Illegal instruction in 0.9.8a

2005-10-28 Thread Dmitry Belyavsky
/proc/cpuinfo when it exists), but I agree it's not very important. Thank you! -- SY, Dmitry Belyavsky (ICQ UIN 6575) __ OpenSSL Project http://www.openssl.org Development Mailing List

RE: [openssl.org #1204] bug report - 0.9.8 and bad record mac because of wrong SSL_OP_TLS_BLOCK_PADDING_BUG handling

2005-12-02 Thread Dmitry Belyavsky
? ... we'v got via gSOAP the best performance results with level 1 in combination with HTTP chunking. I've reproduced this bug with s_client and apache as server requesting page which requires client certificate. So I'm not sure that this bug is completely zlib-related. -- SY, Dmitry Belyavsky

RE: [openssl.org #1204] bug report - 0.9.8 and bad record mac because of wrong SSL_OP_TLS_BLOCK_PADDING_BUG handling

2005-12-02 Thread Dmitry Belyavsky
-4.sarge.2 on client side 1.2.3-8 and 1.2.2-4.sarge.2 on different server. -- SY, Dmitry Belyavsky (ICQ UIN 6575) __ OpenSSL Project http://www.openssl.org Development Mailing List

GOST engine memory problems

2011-09-12 Thread Dmitry Belyavsky
. -- SY, Dmitry Belyavsky Cryptocom LTD www.cryptocom.ru gost_engine.diff Description: Binary data

Engines memory-management problems

2011-09-20 Thread Dmitry Belyavsky
it can cause troubles at least in Windows systems where the resources should be freed where thay are acquired, especially when they are linked using different compiler versions. Please tell me where I’m mistaken. Thank you! -- SY, Dmitry Belyavsky

Re: Engines memory-management problems

2011-09-24 Thread Dmitry Belyavsky
Greetings! On Thu, Sep 22, 2011 at 3:00 AM, Roumen Petrov open...@roumenpetrov.info wrote: Hi Dmitry, Dmitry Belyavsky wrote: Greetings! During the 1.x version the current scheme of algorithms providing through engines was implemented. Debugging our (Cryptocom LTD) engines, I’ve found

Re: Engines memory-management problems

2011-09-26 Thread Dmitry Belyavsky
Greetings! On Tue, Sep 27, 2011 at 12:53 AM, Roumen Petrov open...@roumenpetrov.info wrote: Dmitry Belyavsky wrote: Greetings! On Thu, Sep 22, 2011 at 3:00 AM, Roumen Petrov open...@roumenpetrov.info  wrote: [SNIP] What is result if register__gost methotds are moved from bind

Accessing ENGINESDIR value

2012-02-24 Thread Dmitry Belyavsky
Greetings! What is the correct way to get the ENGINESDIR value It is defined in opensslconf.h but it is not enough to include opensslconf.h to get it defined. Thank you! -- SY, Dmitry Belyavsky __ OpenSSL Project

Re: Accessing ENGINESDIR value

2012-02-25 Thread Dmitry Belyavsky
Greetings! On Sat, Feb 25, 2012 at 4:23 PM, Roumen Petrov open...@roumenpetrov.info wrote: Hi Dmitry, Dmitry Belyavsky wrote: Greetings! What is the correct way to get the ENGINESDIR value  It is defined in opensslconf.h but it is not enough to include opensslconf.h to get it defined

Problems with cms -resign

2012-02-28 Thread Dmitry Belyavsky
not cause problems. The problem can be reproduced both with Gost and RSA algorythms. -- SY, Dmitry Belyavsky __ OpenSSL Project http://www.openssl.org Development Mailing List

Memory leak in dgst

2012-02-28 Thread Dmitry Belyavsky
:414243444546474849404142434445464748494041424344454647484940 3075430552:error:8008106F:lib(128):PKEY_GOST_MAC_CTRL_STR:invalid mac key length:gost_pmeth.c:529: [19:29:57] 2815 file=v3_utl.c, line=400, thread=3075430552, number=30, address=08D3E590 30 bytes leaked in 1 chunks Thank you! -- SY, Dmitry Belyavsky

CMS support for ccgost engine

2012-02-28 Thread Dmitry Belyavsky
Greetings! Here is the patch providing CMS support for ccgost engine. -- SY, Dmitry Belyavsky diff -u openssl-1.0.0e_orig/engines/ccgost//gost_ameth.c openssl-1.0.0e/engines/ccgost//gost_ameth.c --- openssl-1.0.0e_orig/engines/ccgost//gost_ameth.c 2012-02-26 00:04:16.0 +0400 +++ openssl

Re: [openssl.org #2742] Resolved: Problems with cms -resign

2012-02-29 Thread Dmitry Belyavsky
, Feb 29, 2012 at 6:04 PM, Stephen Henson via RT r...@openssl.org wrote: According to our records, your request has been resolved. If you have any further questions or concerns, please respond to this message. -- SY, Dmitry Belyavsky

Re: [openssl.org #2742] Problems with cms -resign

2012-02-29 Thread Dmitry Belyavsky
that not fix the problem for you? Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org -- SY, Dmitry Belyavsky __ OpenSSL Project

Re: [openssl.org #2745] Fwd: GOST engine memory problems

2012-02-29 Thread Dmitry Belyavsky
returning a copy of the already loaded ENGINE. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org -- SY, Dmitry Belyavsky __ OpenSSL Project

Re: [openssl.org #2745] Fwd: GOST engine memory problems

2012-02-29 Thread Dmitry Belyavsky
available see: http://www.openssl.org -- SY, Dmitry Belyavsky __ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List

Bug in GOST89-MAC implementation

2012-05-20 Thread Dmitry Belyavsky
and for the corresponding gostsums utility. Thank you! -- SY, Dmitry Belyavsky mac.diff Description: Binary data nullhash.diff Description: Binary data

Re: [openssl.org #2821] Bug in GOST89-MAC implementation

2012-05-21 Thread Dmitry Belyavsky
Greetings! Sorry, the second patch fixes the behaviour of GOST digest algorythm for zero-length data. Thank you! On Mon, May 21, 2012 at 12:37 PM, Dmitry Belyavsky via RT r...@openssl.org wrote: Greetings! We have found a bug in GOST89-MAC implementation. In case when we calculate the mac

Re: [openssl.org #2745] Fwd: GOST engine memory problems

2012-09-04 Thread Dmitry Belyavsky
the issue: http://cvs.openssl.org/chngview?cn=22789 Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org -- SY, Dmitry Belyavsky __ OpenSSL

Re: [openssl.org #2803] bug report: OCSP_basic_verify may return incorrect value

2012-11-28 Thread Dmitry Belyavsky
. The following path correct this. Thanks for all the good job Jean-Etienne Schwartz -- SY, Dmitry Belyavsky

Incostistency using GOST engine with openssl 1.0.1e

2013-08-24 Thread Dmitry Belyavsky
not investigate it yet. Thank you! -- SY, Dmitry Belyavsky

Re: [openssl.org #3116] Incostistency using GOST engine with openssl 1.0.1e

2013-08-26 Thread Dmitry Belyavsky
. Commercial tech support now available see: http://www.openssl.org -- SY, Dmitry Belyavsky

CMS/PKCS#7 encryption parameters

2013-08-28 Thread Dmitry Belyavsky
. Thank you! -- SY, Dmitry Belyavsky

Re: [openssl.org #3116] Incostistency using GOST engine with openssl 1.0.1e

2013-08-28 Thread Dmitry Belyavsky
:48 PM, Dmitry Belyavsky beld...@gmail.com wrote: Greetings! Thank you for your explanation! But I'm sorry, I did not understand why the behaviour depends on the config option's order. In case 3 and 4 the behaviour differs but it is expected by me to be the same. And how difficult

Strange behaviour of pkcs7_decrypt_info

2013-09-04 Thread Dmitry Belyavsky
, eklen, ri, pkey) 0) Why do we not regard the decryption error as fatal there? Wouldn't it be better if we return the result of EVP_PKEY_decrypt call instead? The cms code seems to have the same problem but I cannot show the exact line. Thank you! -- SY, Dmitry Belyavsky

Re: CMS/PKCS#7 encryption parameters

2013-09-08 Thread Dmitry Belyavsky
Greetings! On Sun, Sep 8, 2013 at 9:53 PM, Dr. Stephen Henson st...@openssl.orgwrote: On Wed, Aug 28, 2013, Dmitry Belyavsky wrote: Greetings! The cipher algorithm GOST has a set of substitution blocks as parameters of encryption/decryption. When we use the gost engine, we can

Strange behaviour of pkcs7_decrypt_info

2013-09-15 Thread Dmitry Belyavsky
, eklen, ri, pkey) 0) Why do we not regard the decryption error as fatal there? Wouldn't it be better if we return the result of EVP_PKEY_decrypt call instead? The cms code seems to have the same problem but I cannot show the exact line. Thank you! -- SY, Dmitry Belyavsky

ssl_parse_serverhello_tlsext question

2014-01-05 Thread Dmitry Belyavsky
Hello! I have a question about the check in the ssl_parse_serverhello_tlsext function: if (data = (d+n-2)) goto ri_check; Shouldn't it be if (data (d+n-2)) goto ri_check; instead? Thank you! -- SY, Dmitry Belyavsky

Re: Requirements/Steps to add serpent to openssl

2014-02-10 Thread Dmitry Belyavsky
. Thanks a lot, Shady -- SY, Dmitry Belyavsky

Re: [openssl.org #3322] [PATCH] ccgost to use configured params for 28147-89 in CNT and IMIT mode

2014-04-22 Thread Dmitry Belyavsky
...@openssl.org -- SY, Dmitry Belyavsky

Re: [openssl.org #3325] Problem with client certification authorization

2014-04-24 Thread Dmitry Belyavsky
Hello Dave, On Thu, Apr 24, 2014 at 12:24 PM, Dave Thompson dthomp...@prinpay.comwrote: From: owner-openssl-...@openssl.org On Behalf Of Dmitry Belyavsky via RT Sent: Wednesday, April 23, 2014 12:29 Cc: openssl-dev@openssl.org Subject: [openssl.org #3325] Problem with client

Re: [openssl.org #3325] Problem with client certification authorization

2014-04-24 Thread Dmitry Belyavsky
Hello Steve, On Thu, Apr 24, 2014 at 9:26 PM, Dr. Stephen Henson st...@openssl.orgwrote: On Thu, Apr 24, 2014, Dmitry Belyavsky wrote: So whether there is a way to test that error in cert verification aborts the connection in case of bad cert using s_server/s_client pair? Try

Re: [openssl.org #3350] AutoReply: Problem using gost engine in Apache 2

2014-05-15 Thread Dmitry Belyavsky
Hello, I'm sorry, we should make extra checks to be sure that it is not our fault. Thank you! On Tue, May 13, 2014 at 11:39 AM, Dmitry Belyavsky via RT r...@openssl.orgwrote: Hello, Here are previous tickets related to this problem: http://rt.openssl.org/Ticket/Display.html?id=2598

Re: [openssl.org #3350] AutoReply: Problem using gost engine in Apache 2

2014-05-27 Thread Dmitry Belyavsky
Hello Stephen, Yes, it was a problem in our patch. So this ticket (and I think, 2598) should be closed. Thank you very much! On Sun, May 25, 2014 at 5:26 PM, Dmitry Belyavsky beld...@gmail.com wrote: Hello Stephen, On Sun, May 25, 2014 at 5:19 PM, Dr. Stephen Henson st

Re: [openssl.org #3350] AutoReply: Problem using gost engine in Apache 2

2014-05-27 Thread Dmitry Belyavsky
Hello, I think it is not to be closed, the leak occurs. On Tue, May 27, 2014 at 7:23 PM, Matt Caswell m...@openssl.org wrote: On 27 May 2014 15:40, Dmitry Belyavsky beld...@gmail.com wrote: Hello Stephen, Yes, it was a problem in our patch. So this ticket (and I think, 2598) should

Re: [openssl.org #3350] AutoReply: Problem using gost engine in Apache 2

2014-06-01 Thread Dmitry Belyavsky
Hello Shephen, Thank you. I can't reproduce it either, the ticket may be closed. On Sun, Jun 1, 2014 at 6:01 PM, Dr. Stephen Henson st...@openssl.org wrote: On Tue, May 27, 2014, Dmitry Belyavsky wrote: Hello, I think it is not to be closed, the leak occurs. Have you tried

Re: [openssl.org #839] Patch pk7_lib.c:PKCS7_get_recip_info()

2014-09-04 Thread Dmitry Belyavsky
, Dmitry Belyavsky

Re: [openssl.org #3530] Problems measuring openssl speed

2014-09-16 Thread Dmitry Belyavsky
Hello! I've made a quick fix to solve this problem (attached). The main problem with this fix is to move locally-defined engine constants to the level of evp.h, so if you suggest a better solution, I am ready to implement it. Thank you! On Tue, Sep 16, 2014 at 9:29 PM, Dmitry Belyavsky via RT

Re: [openssl.org #3530] Problems measuring openssl speed

2014-09-17 Thread Dmitry Belyavsky
Hello Matt, the improved patch is attached. It uses the EVP_DigestSign* API instead of EVP_digest and does not modify any header files. Thank you! On Wed, Sep 17, 2014 at 2:22 AM, Matt Caswell via RT r...@openssl.org wrote: On 16/09/14 19:31, Dmitry Belyavsky wrote: Hello! I've made

Re: Integration of #2578

2014-09-18 Thread Dmitry Belyavsky
, Dmitry Belyavsky

Re: [openssl.org #3556] Problem building openssl 1.0.1i in debug mode

2014-10-05 Thread Dmitry Belyavsky
it. -- Principal Security Engineer, Akamai Technologies IM: rs...@jabber.me Twitter: RichSalz -- SY, Dmitry Belyavsky

Re: [openssl.org #3556] Problem building openssl 1.0.1i in debug mode

2014-10-05 Thread Dmitry Belyavsky
: Did you take the (unsigned int) cast off? Do sed –n –e 160,162p bn_ctx. -- SY, Dmitry Belyavsky

Re: [openssl.org #3557] -nameopt utf8 behaviour in openssl 1.0.1i

2014-10-11 Thread Dmitry Belyavsky
Hello Openssl team, Any comments? Thank you! On Mon, Oct 6, 2014 at 12:07 AM, Dmitry Belyavsky via RT r...@openssl.org wrote: Hello OpenSSL Team, The x509 and req commands behave strangely when the nameopt utf8 is specified. beldmit@manul$ openssl x509 -text -noout -nameopt utf8

Re: [openssl.org #3556] Problem building openssl 1.0.1i in debug mode

2014-10-23 Thread Dmitry Belyavsky
test passes, etc.) it wouldn't be supported and questions should be dismissed. Official way to make a debugging build is to pass -d to ./config. Thank you for information! -- SY, Dmitry Belyavsky

[openssl-dev] Error building openssl on SUSE

2015-04-20 Thread Dmitry Belyavsky
you! -- SY, Dmitry Belyavsky ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Re: [openssl-dev] Bug in SSL_CTX_check_private_key?

2015-05-06 Thread Dmitry Belyavsky
Hello Viktor, On Wednesday, May 6, 2015, Viktor Dukhovni openssl-us...@dukhovni.org wrote: On Wed, May 06, 2015 at 08:33:37PM +0300, Dmitry Belyavsky wrote: I would like to suggest a small patch providing the necessary check for RSA_METHOD_FLAG_NO_CHECK here. I am not convinced

Re: [openssl-dev] [openssl.org #3837] Bug in SSL_CTX_check_private_key?

2015-05-06 Thread Dmitry Belyavsky
Hello Victor, On Wed, May 6, 2015 at 7:10 PM, Viktor Dukhovni openssl-us...@dukhovni.org wrote: On Wed, May 06, 2015 at 05:58:31PM +0200, Dmitry Belyavsky via RT wrote: It seems to me there is a bug in the SSL_CTX_check_private_key function. The function ignores RSA_METHOD_FLAG_NO_CHECK

Re: [openssl-dev] [openssl.org #3895] fprintf in ssl library

2015-06-05 Thread Dmitry Belyavsky
signatures, but GOST 2012 (implemented in a separate patch) has both 64 bytes and 128 bytes variants. BTW, we are interested in providing the GOST 2012 support for openssl and have a comprehensive patch implementing it. Thank you! -- SY, Dmitry Belyavsky

Re: [openssl-dev] curve25519

2015-06-21 Thread Dmitry Belyavsky
it is constant-time? Thank you! -- SY, Dmitry Belyavsky ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Re: [openssl-dev] A new openssl engine

2015-06-25 Thread Dmitry Belyavsky
Team plan regarding the GOST engine? Thank you! -- SY, Dmitry Belyavsky ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Re: [openssl-dev] A new openssl engine

2015-06-25 Thread Dmitry Belyavsky
Hello Viktor, On Thu, Jun 25, 2015 at 11:58 PM, Viktor Dukhovni openssl-us...@dukhovni.org wrote: On Thu, Jun 25, 2015 at 10:48:08PM +0200, Kurt Roeckx wrote: On Thu, Jun 25, 2015 at 11:36:58PM +0300, Dmitry Belyavsky wrote: BTW, what does the OpenSSL Team plan regarding the GOST

Re: [openssl-dev] A new openssl engine

2015-06-26 Thread Dmitry Belyavsky
Dear Matt, On Fri, Jun 26, 2015 at 2:23 AM, Matt Caswell m...@openssl.org wrote: On 25/06/15 21:58, Viktor Dukhovni wrote: On Thu, Jun 25, 2015 at 10:48:08PM +0200, Kurt Roeckx wrote: On Thu, Jun 25, 2015 at 11:36:58PM +0300, Dmitry Belyavsky wrote: BTW, what does the OpenSSL Team

Re: [openssl-dev] A new openssl engine

2015-06-26 Thread Dmitry Belyavsky
Hello Matt, On Fri, Jun 26, 2015 at 9:12 PM, Matt Caswell m...@openssl.org wrote: On 26/06/15 17:36, Dmitry Belyavsky wrote: It's not a problem to start mantaining the engine code outside the main OpenSSL tree. But comrehensive support of GOST requires much more: - TLS (the most

Re: [openssl-dev] [openssl.org #3813] Fwd: Error building openssl on SUSE

2015-05-27 Thread Dmitry Belyavsky
, Dmitry Belyavsky ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Re: [openssl-dev] GOST89 cipher control command

2015-05-29 Thread Dmitry Belyavsky
Hello OpenSSL team, Any recommendations? Thank you! On Mon, May 25, 2015 at 10:40 PM, Dmitry Belyavsky beld...@gmail.com wrote: Hello Openssl team, GOST89 cipher algorithm seems to be the only cipher algorithm supporting more than one sets of S-boxes. Current implementation of the GOST89

Re: [openssl-dev] [openssl.org #3876] [PATCH] Do not complain if config file not found

2015-05-29 Thread Dmitry Belyavsky
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev -- SY, Dmitry Belyavsky ___ openssl-dev

Re: [openssl-dev] [openssl.org #3813] Fwd: Error building openssl on SUSE

2015-05-25 Thread Dmitry Belyavsky
assembler /dev/null GNU assembler version 2.17.50.0.6-14.el5 (x86_64-redhat-linux) using BFD version 2.17.50.0.6-14.el5 20061020 -- SY, Dmitry Belyavsky ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

[openssl-dev] GOST89 cipher control command

2015-05-25 Thread Dmitry Belyavsky
. If I understand correctly, the only way to do it is to specify a ctrl-command and implement it in the engine. Is it OK to reuse EVP_CTRL_INIT ctrl command for this purpose or it will be better to add a special value for this? Thank you! -- SY, Dmitry Belyavsky

Re: [openssl-dev] [PATCH] GOST engine and custom paramsets

2015-08-15 Thread Dmitry Belyavsky
-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev -- SY, Dmitry Belyavsky ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Re: [openssl-dev] Improving OpenSSL default RNG

2015-10-23 Thread Dmitry Belyavsky
eave these options possible. -- SY, Dmitry Belyavsky ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Re: [openssl-dev] [openssl.org #4141] GOST ciphersuites

2015-11-16 Thread Dmitry Belyavsky
e > can > add SSL_TLSV1 to the GOST ciphersuites but that will change the behaviour > from > what it was before. > Usage of the GOST ciphersuites with the SSLv3 protocol is not specified, so the change should not affect the GOST-related behaviour. So I think it will be better for c

Re: [openssl-dev] Adding async support

2015-10-07 Thread Dmitry Belyavsky
ations, how can we adopt the engine and software using this engine to process them asynchronously? -- SY, Dmitry Belyavsky ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Re: [openssl-dev] Adding async support

2015-10-08 Thread Dmitry Belyavsky
Dear Matt, I have some questions. On Thu, Oct 8, 2015 at 12:32 AM, Matt Caswell <m...@openssl.org> wrote: > > > On 07/10/15 21:44, Dmitry Belyavsky wrote: > > Dear Matt, > > > > On Wed, Oct 7, 2015 at 4:43 PM, Matt Caswell <m...@openssl.org

Re: [openssl-dev] Adding async support

2015-10-08 Thread Dmitry Belyavsky
er(void * args) { ... } static ASYNC_JOB *offload (void *args) { ASYNC_JOB *pjob = NULL; int funcret; size_t size = 0; int ret = ASYNC_start_job(, , async_wrapper, args, *args, size); if (ret != ASYNC_PAUSE) return NULL; return pjob; } ? Thank you! -- SY, Dmitry Belyavsky ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Re: [openssl-dev] Adding async support

2015-10-08 Thread Dmitry Belyavsky
ifferent > solution for different hardware. These patches do not provide a solution > to that problem. > So I do not understand what you mean by "offload" :-( I understand that it's an engine-dependent, but I can't imagine a corresponding pseudo code. -- SY, Dmitry Bel

Re: [openssl-dev] Adding async support

2015-10-08 Thread Dmitry Belyavsky
Dear Matt, On Thu, Oct 8, 2015 at 10:06 PM, Matt Caswell <m...@openssl.org> wrote: > > > On 08/10/15 18:56, Dmitry Belyavsky wrote: > > > The second problem is entirely engine dependant. It will be a > different > > solution for different hardw

Re: [openssl-dev] [openssl.org #4089] NULL ciphersuites do not work in master

2015-10-11 Thread Dmitry Belyavsky
Dear Kurt, On Sun, Oct 11, 2015 at 9:13 PM, Kurt Roeckx via RT <r...@openssl.org> wrote: > On Sun, Oct 11, 2015 at 05:54:16PM +0000, Dmitry Belyavsky via RT wrote: > > Hello! > > > > When I debug, I see that the cipher is forbidden by > > the ssl_security_

Re: [openssl-dev] [openssl.org #4073] Segfault in engine processing

2015-10-12 Thread Dmitry Belyavsky
ost -md_gost94 -mac hmac -macop > > key:123456901234567890123456789012 > > > > I assume this is on master? I can't reproduce this. Are you using your new > GOST > engine or the one currently in master? > Yes, it's on master. I think that I use the engine currently in

Re: [openssl-dev] [openssl.org #4073] Segfault in engine processing

2015-10-12 Thread Dmitry Belyavsky
Hello! Thank you, I can't reproduce it either. Please close the ticket. Sorry for disturbing. On Mon, Oct 12, 2015 at 12:39 PM, Dmitry Belyavsky via RT <r...@openssl.org> wrote: > Hello Matt, > > On Mon, Oct 12, 2015 at 12:08 PM, Matt Caswell via RT <r...@openssl.org> >

[openssl-dev] PBE_UNICODE

2015-11-18 Thread Dmitry Belyavsky
the PBE_UNICODE is undefined and locale is set to ru_RU.utf8. Do I miss something or this variable and corresponding #ifdef may be eliminated? Thank you! -- SY, Dmitry Belyavsky ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman

[openssl-dev] Regression: dgst command

2016-01-03 Thread Dmitry Belyavsky
have changed in 1.1.0. Is it a design decision (and I should fix tests) or misbehavior? Thank you! -- SY, Dmitry Belyavsky ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

[openssl-dev] Variable length of digest

2015-12-23 Thread Dmitry Belyavsky
providing such a solution be acceptable? Thank you! -- SY, Dmitry Belyavsky ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Re: [openssl-dev] Variable length of digest

2015-12-23 Thread Dmitry Belyavsky
of functions to produce > fixed length (input data indepdendent) results. > > If there's a new construct whose output size depends on the input > data, that probably requires a new family of functions. > Well, the gost-mac is treated specially itself and may be it can be simplified i

Re: [openssl-dev] Variable length of digest

2015-12-24 Thread Dmitry Belyavsky
Dear Victor, On Thu, Dec 24, 2015 at 11:02 AM, Victor Wagner <vi...@wagner.pp.ru> wrote: > On Thu, 24 Dec 2015 10:45:37 +0300 > Dmitry Belyavsky <beld...@gmail.com> wrote: > > > > > > > > If there's a new construct whose output size depends on the inpu

Re: [openssl-dev] PBE_UNICODE

2015-11-23 Thread Dmitry Belyavsky
ave the openssl code with 2 variants of such processing that can be switched by the PBE_UNICODE define. 3. We have a "Russian" variant of specification. I am interested mostly in compatibility between the openssl implementation and "Russian" one when the password contains ASCII or Cyrilli

Re: [openssl-dev] [openssl.org #4158] GOST 2012 compatibility is broken by commit 28f4580c1e510ccf4278a20975c9bc3306f758d6

2015-11-29 Thread Dmitry Belyavsky
eaks > > GOST 2012 client auth processing. > > > > This should be fixed by commit aa430c7467bcb7aa0a88 > It works. Thank you very much! -- SY, Dmitry Belyavsky ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Re: [openssl-dev] PBE_UNICODE

2015-11-20 Thread Dmitry Belyavsky
es with the value 0x00. As I understand the text herein before, there is no ultimate specification. So I would prefer a set of options be specified by the caller with a reasonable default value. But as I do not have enough PKCS#12 from real-life sources, I can't predict this default value. Currently

Re: [openssl-dev] PBE_UNICODE

2015-11-20 Thread Dmitry Belyavsky
ing zero byte and passed as the P element of the PBKDF2 algorithm" The test example was provide by the authors of specification. There are also examples in the document. May be it will be useful. -- SY, Dmitry Belyavsky ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Re: [openssl-dev] PBE_UNICODE

2015-11-20 Thread Dmitry Belyavsky
dows system default. But in fact the openssl being built without defining the PBE_UNICODE macros was able to parse the test PKCS12. Thank you! -- SY, Dmitry Belyavsky ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Re: [openssl-dev] [openssl.org #4545] Crash in crypto/rand/md_rand.c

2016-05-27 Thread Dmitry Belyavsky
Nothing in this email will operate to bind 1E to any order or other > contract. > > -- > Ticket here: http://rt.openssl.org/Ticket/Display.html?id=4545 > Please log in as guest with password guest if prompted > > > -- > openssl-dev mailing list > To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev > > -- SY, Dmitry Belyavsky -- openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Re: [openssl-dev] Endianess info

2016-02-11 Thread Dmitry Belyavsky
f" -} I386_ONLY > > +/* Big or little endian? */ > > +{- $config{lendian} eq "define" ? "#define" : "#undef" -} > OPENSSL_LITTLE_ENDIAN > > > > #undef OPENSSL_UNISTD > > #define OPENSSL_UNISTD {- $target{unistd} -} > > > > --

Re: [openssl-dev] [openssl.org #4267] Missing accessor to the EVP_CIPHER_CTX member oiv

2016-02-24 Thread Dmitry Belyavsky
23 Jan 2016 kl. 09.40.19, skrev beld...@gmail.com: > > >> > > > > Hello, > > >> > > > > > > >> > > > > After making the EVP_CIPHER_CTX struct opaque I found that > there > > >> > > > > is a > > >> > > > > missin

Re: [openssl-dev] [openssl.org #4226] FIX: ADD IPv6 support for OCSP Responder

2016-01-25 Thread Dmitry Belyavsky
Dear Rich, On Mon, Jan 25, 2016 at 5:06 PM, Rich Salz via RT <r...@openssl.org> wrote: > We are working on full IPv6 support and it will appear in the next release. > Do you mean 1.1.0? Thank you! -- SY, Dmitry Belyavsky ___ openssl

Re: [openssl-dev] [openssl-users] OpenSSL version 1.1.0 pre release 3 published

2016-02-17 Thread Dmitry Belyavsky
Dear Rich, > Just to emphasize one important point: Our next release is planned to be > Beta-1, in about a month. After that, no new API's or features will be > added to OpenSSL 1.1 > > If so, could you take a look at RT#4267? Thank you! -- SY, Dmitry Belyavsky -- openssl-d

  1   2   3   >