Re: Trouble with Illegal instruction

2013-05-11 Thread Holger Bruenjes
Am 2013-05-11 02:45, schrieb Tom marchand: What platform is this running on? eistre:/ # uname -a Linux eistre 2.6.32-eisfair-1-SMP #1 SMP Thu Apr 4 17:26:28 CEST 2013 i686 i686 i386 GNU/Linux eistre:/ # /lib/libc.so.6 GNU C Library stable release version 2.8, by Roland McGrath et al.

Re: Defintion of OBJ_bsearch_pmeth()

2013-05-11 Thread Matt Caswell
On 11 May 2013 05:05, Lunar Mushrooms lunar.mushro...@gmail.com wrote: Hello I can see a call to OBJ_bsearch_pmeth() in openssl source. By I could not find the definition of OBJ_bsearch_pmeth(). I greped the entire source. Can somebody help me to find the definition ?

Re: Remove SSLv2 via #ifdef

2013-05-11 Thread Jakob Bohm
On 10-05-2013 21:24, Salz, Rich wrote: Would there be any interest (and support) from the dev team for patches that completely remove SSLv2 API’s? /r$ Already there: ./Configure -no-ssl2 __ OpenSSL Project

Re: Self-signed certificates and keyUsage extension

2013-05-11 Thread Stefan H. Holek
IIRC, this means that the Subject and Issuer names on your self-signed cert do not match. Stefan On 10.05.2013, at 18:48, no_spam...@yahoo.com wrote: openssl verify -check_ss_sig -CAfile ./my-ss-cert.pem ./my-ss-cert.pem I get the following error: error 20 at 0 depth lookup:unable to get

Re: Trouble with Illegal instruction

2013-05-11 Thread Jakob Bohm
(This is a summary of the mail below, hence posted above it) Wauv! An original Pentium II, the first P6 model with MMX. I guess someone needs to recheck their assembler programming assumptions about which instructions are implied by the MMX CPUID bit. Note that this hardware (along with the

Re: Self-signed certificates and keyUsage extension

2013-05-11 Thread Viktor Dukhovni
On Sat, May 11, 2013 at 10:49:40AM +0200, Stefan H. Holek wrote: On 10.05.2013, at 18:48, no_spam...@yahoo.com wrote: openssl verify -check_ss_sig -CAfile ./my-ss-cert.pem ./my-ss-cert.pem I get the following error: error 20 at 0 depth lookup:unable to get local issuer certificate

Re: TLS extensions

2013-05-11 Thread Jeremy Harris
On 05/06/2013 09:53 AM, Daniel W wrote: Hello everyone, i want to use TLS extensions. In fact the two extensions trusted_ca_key and status_request. Could someone explain me how this works on a little example or lead me to a tutorial or good documentation? Exim uses status_request; source at

RE: Remove SSLv2 via #ifdef

2013-05-11 Thread Salz, Rich
I guess I was confused, expecting to see the ssl23 stuff removed as well, but I guess it's okay to leave it. -- Principal Security Engineer Akamai Technology Cambridge, MA __ OpenSSL Project

RE: SSL_CTX_set{_preferred)_cipher_list?

2013-05-11 Thread Salz, Rich
What is the difference between SSL_CTX_SET_cipher_list and SSL_CTX_set_preferred_cipher_list? Which version of OpenSSL has the preferred version? I don't see this in master. Gaak. Sorry for the confusion. Looking at some decade-old local patches. :( /r$ -- Principal