OpenSSL 'zlib' Compression Memory Leak Remote Denial of Service Vulnerability in openssl 0.9.8h

2008-10-14 Thread joshi chandra
Hi All, I am using openssl 9.8h and i have found Compression Memory Leak Remote Denial of Service Vulnerability in it. The vulnerability info can be found in the following link http://www.securityfocus.com/bid/31692/info. Is there any patches i can apply on openssl 0.9.8h please help Thanks

using applink.c

2008-10-14 Thread Michael Luich
So I've spent all week trying to find the answer to no success. I've downloaded and installed the precompiled openssl binaries for windows. My app includes the line: #include openssl/applink.c and compiles correctly. The app runs until openssl code is accessed. Then I get:

Re: Microsoft Visual C++

2008-10-14 Thread So Gerald
As I know,Microsoft Visual C++ Express do not support multithread programs correctly and OpenSSL needs to work at multithread mode. So you should use the other version of compiler instead. 2008/10/11 Michael Luich [EMAIL PROTECTED] On Fri, Oct 10, 2008 at 9:25 PM, Thomas J. Hruska [EMAIL

Re: Build static openssl

2008-10-14 Thread So Gerald
If you compile OpenSSL with VC,please do nmake -f \nt.mak instead of ntdll.mak. MingW do also dynamic and static compiling at one time. 2008/10/13 Prathima Dandapani -X (pdandapa - HCL at Cisco) [EMAIL PROTECTED] Hello All, Can anyone tell me how to create statically linked

Re: Leaks X509

2008-10-14 Thread So Gerald
X509_free(x); 2008/10/2 David Schwartz [EMAIL PROTECTED] Stanislav Mikhailenko: Hello I use openssl 0.9.8i in my project under Win32. There are some leaks detected when i do just it: X509* x=X509_new(); X509_free(); It was in previous versions too. What should i

Re: Remove Ask for a pass phrase

2008-10-14 Thread So Gerald
char passwd[] = {0} 2008/8/27 delcour.pierre [EMAIL PROTECTED] Hello everyone, I'm trying to load a private key with this function : /EVP_PKEY *PEM_read_PrivateKey(FILE *fp, EVP_PKEY **x,pem_password_cb *cb, void *u);/ I use it this way : EVP_PKEY* key =

Re: OpenSSL 'zlib' Compression Memory Leak Remote Denial of Service Vulnerability in openssl 0.9.8h

2008-10-14 Thread Victor Duchovni
On Mon, Oct 13, 2008 at 11:38:54PM -0700, joshi chandra wrote: Hi All, I am using openssl 9.8h and i have found Compression Memory Leak Remote Denial of Service Vulnerability in it. The vulnerability info can be found in the following link http://www.securityfocus.com/bid/31692/info.

Re: Microsoft Visual C++

2008-10-14 Thread Josue Andrade Gomes
Do you have any references about this VC++ Express problem with multithreaded programs? I'm using it and I'm interested. -- On Tue, Oct 14, 2008 at 11:33 AM, So Gerald [EMAIL PROTECTED] wrote: As I know,Microsoft Visual C++ Express do not support multithread programs correctly and OpenSSL

Re: Microsoft Visual C++

2008-10-14 Thread Michael Luich
A phew at least it's not me. bloomin M$.. Thanks Mike Luich On Tue, Oct 14, 2008 at 10:33 AM, So Gerald [EMAIL PROTECTED] wrote: As I know,Microsoft Visual C++ Express do not support multithread programs correctly and OpenSSL needs to work at multithread mode. So you should use the

Re: Hello

2008-10-14 Thread joshi chandran
Yes this is the right place to ask questions regarding openssl On Tue, Oct 14, 2008 at 8:51 PM, So Gerald [EMAIL PROTECTED] wrote: Yes 2008/8/23 Nguyen, Harris [EMAIL PROTECTED] Hello, Is this the right place to ask Openssl programming issues? Thanks Harris Nguyen

Runtime error if dynamically loading SSL_library_init()

2008-10-14 Thread Raymond Zhou
Anyone can help me on this? Thanks a lot! --- On Tue, 10/14/08, Raymond Zhou [EMAIL PROTECTED] wrote: From: Raymond Zhou [EMAIL PROTECTED] Subject: Runtime error if dynamically loading SSL_library_init() To: openssl-users@openssl.org Date: Tuesday, October 14, 2008, 12:18 AM Hello there,

Re: Hello

2008-10-14 Thread So Gerald
Yes 2008/8/23 Nguyen, Harris [EMAIL PROTECTED] Hello, Is this the right place to ask Openssl programming issues? Thanks Harris Nguyen __ OpenSSL Project http://www.openssl.org User Support

pq_compat.h

2008-10-14 Thread Alex Chen
The header file crypto/pqueue/pq_compat.h does not have the following directive #ifndef HEADER_PQ_COMPAT_H #define HEADER_PQ_COMPAT_H #enedif The effect is that we get warnings about PQ_64BIT being redefined because ssl.h includes ssl3.h, which includes pq_compat.h, and dtls1.h,

question regarding ./config no-idea no-mdc2 no-rc5

2008-10-14 Thread Frank Zhou
Hi There, I am building a web service client application that uses openSSL for web service https/SSL communication. In order to avoid the patent issue for the portion of openSSL, I build the openSSL libraries myself using ./config no-idea no-mdc2 no-rc5. All is working fine as far as I am