Re: OpenSSL on Mac

2014-04-01 Thread Jeffrey Walton
On Mon, Mar 31, 2014 at 3:18 PM, Landen Landens landenfam...@gmail.com wrote: My Mac still has OpenSSL 0.9.8. How may I update this to the latest stable version? You can't because 0.9.8 and 1.0.1 are *not* binary compatible. You can download OpenSSL, `./Configure darwin64-x86_64-cc`, `make`,

Re: OpenSSL on Mac

2014-04-01 Thread Viktor Dukhovni
On Tue, Apr 01, 2014 at 05:37:05AM -0400, Jeffrey Walton wrote: You can download OpenSSL, `./Configure darwin64-x86_64-cc`, `make`, and then `sudo make install`. Your updated version will be located in `/usr/local/ssl`. Using it in programs can be tricky, though. Apple's linkers do not

Re: OpenSSL on Mac

2014-04-01 Thread Jeffrey Walton
On Tue, Apr 1, 2014 at 9:24 AM, Viktor Dukhovni openssl-us...@dukhovni.org wrote: On Tue, Apr 01, 2014 at 05:37:05AM -0400, Jeffrey Walton wrote: You can download OpenSSL, `./Configure darwin64-x86_64-cc`, `make`, and then `sudo make install`. Your updated version will be located in

Re: OpenSSL on Mac

2014-04-01 Thread Viktor Dukhovni
On Tue, Apr 01, 2014 at 10:01:16AM -0400, Jeffrey Walton wrote: However, alternative flags that achieve the same effect are available: To build a library whose SONAME involves an rpath: $ cc -shared -Wl,-flat_namespace -Wl,-undefined,dynamic_lookup \

Re: OpenSSL 1.0.1c, Mac OS X, -no-XXX, and [missing] make depend

2013-01-20 Thread Ben Laurie
On 19 January 2013 16:31, Jeffrey Walton noloa...@gmail.com wrote: On Sat, Jan 19, 2013 at 9:17 AM, Ben Laurie b...@links.org wrote: On 26 December 2012 20:07, Jeffrey Walton noloa...@gmail.com wrote: On Wed, Dec 26, 2012 at 9:57 AM, Ben Laurie b...@links.org wrote: On Tue, Dec 25, 2012 at

Re: OpenSSL 1.0.1c, Mac OS X, -no-XXX, and [missing] make depend

2013-01-20 Thread Jeffrey Walton
On Sat, Jan 19, 2013 at 11:42 AM, Ben Laurie b...@links.org wrote: On 19 January 2013 16:31, Jeffrey Walton noloa...@gmail.com wrote: On Sat, Jan 19, 2013 at 9:17 AM, Ben Laurie b...@links.org wrote: On 26 December 2012 20:07, Jeffrey Walton noloa...@gmail.com wrote: On Wed, Dec 26, 2012 at

Re: OpenSSL 1.0.1c, Mac OS X, -no-XXX, and [missing] make depend

2013-01-19 Thread Ben Laurie
On 26 December 2012 20:07, Jeffrey Walton noloa...@gmail.com wrote: On Wed, Dec 26, 2012 at 9:57 AM, Ben Laurie b...@links.org wrote: On Tue, Dec 25, 2012 at 1:35 PM, Jeffrey Walton noloa...@gmail.com wrote: I fetched `makedepend` from FreeDesktop.org

Re: OpenSSL 1.0.1c, Mac OS X, -no-XXX, and [missing] make depend

2013-01-19 Thread Jeffrey Walton
On Sat, Jan 19, 2013 at 9:17 AM, Ben Laurie b...@links.org wrote: On 26 December 2012 20:07, Jeffrey Walton noloa...@gmail.com wrote: On Wed, Dec 26, 2012 at 9:57 AM, Ben Laurie b...@links.org wrote: On Tue, Dec 25, 2012 at 1:35 PM, Jeffrey Walton noloa...@gmail.com wrote: I fetched

Re: OpenSSL 1.0.1c, Mac OS X, -no-XXX, and [missing] make depend

2012-12-26 Thread Jeffrey Walton
On Tue, Dec 25, 2012 at 8:35 AM, Jeffrey Walton noloa...@gmail.com wrote: Hi All, I'm having problem building on Mac OS X (2012 MBP, OS X 10.8, Xcode 4.5). The target is iOS, but this appears to be a host problem. Apple lacks DTLS, STCP, and friends, so I needed to ./config with -no-dtls.

Re: OpenSSL 1.0.1c, Mac OS X, -no-XXX, and [missing] make depend

2012-12-26 Thread Ben Laurie
On Tue, Dec 25, 2012 at 1:35 PM, Jeffrey Walton noloa...@gmail.com wrote: I fetched `makedepend` from FreeDesktop.org (http://xorg.freedesktop.org/releases/individual/util/). It would not build due to missing dependencies. Ad infinitum. $ port search makedepend makedepend @1.0.4 (x11, devel)

Re: OpenSSL 1.0.1c, Mac OS X, -no-XXX, and [missing] make depend

2012-12-26 Thread Jeffrey Walton
On Wed, Dec 26, 2012 at 9:57 AM, Ben Laurie b...@links.org wrote: On Tue, Dec 25, 2012 at 1:35 PM, Jeffrey Walton noloa...@gmail.com wrote: I fetched `makedepend` from FreeDesktop.org (http://xorg.freedesktop.org/releases/individual/util/). It would not build due to missing dependencies. Ad

Re: OpenSSL and Mac OS and export fun

1999-11-22 Thread Mark H. Wood
On Sat, 20 Nov 1999, Wilfredo Sanchez wrote: Dr Stephen Henson [EMAIL PROTECTED]: | I'm no expert but what you are suggesting sounds like "crypto with a | hole" which has been asked about before and people have been told its | illegal. I'm aware of this rumor, though I've never one

Re: OpenSSL and Mac OS and export fun

1999-11-21 Thread Ben Laurie
Rich Salz wrote: To the best of my recollection, the following is a direct quote from one of the NSA folks: ... we call that crypto-with-a-hole and we don't allow that to be exported Hmm ... thought it was the DoC that wrote the export rules. :-) Cheers, Ben. --

Re: OpenSSL and Mac OS and export fun

1999-11-21 Thread Gregory Stark
Rich, Was I there? ;) Greg Stark - Original Message - From: "Rich Salz" [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Saturday, November 20, 1999 11:56 PM Subject: Re: OpenSSL and Mac OS and export fun | I'm no expert but what you are suggesting sounds li

Re: OpenSSL and Mac OS and export fun

1999-11-21 Thread Vin McLellan
. _Vin At 08:40 AM 11/21/99 -0500, Gregory Stark wrote: Rich, Was I there? ;) Greg Stark - Original Message - From: "Rich Salz" [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Saturday, November 20, 1999 11:56 PM Subject: Re: OpenSSL and Mac OS and export fun | I'm no exper

Re: OpenSSL on Mac (Was: Can US companies use OpenSSL?)

1999-09-16 Thread Roy Wood
There are some issues with a US company exporting anything dealing with crypto - you may have heard that our government frowns on such practices ;-) . Ah yes-- the US government. Same government that grants all those software patents, right? :-) However, since a diff file doesn't contain

Re: OpenSSL on Mac (Was: Can US companies use OpenSSL?)

1999-09-16 Thread Steve Lihn
Anybody can help me with manipulating ASN1_OBJECT? 1) How do I create a new object identifier, say 1.10.20.30.40 ? 2) How do I set it into ASN1_OBJECT variable? 3) If i2d is performed and ASN1_OBJECT is read from a certificate, what is the internal structure? I want to be able to verify I am

Re: OpenSSL on Mac (Was: Can US companies use OpenSSL?)

1999-09-15 Thread CJ Holmes
CJ Holmes [EMAIL PROTECTED] writes: We've done it here at StarNINE for our WebSTAR product http://www.webstar.com/, mainly because the alternatives are vastly more expensive and don't support the Mac platform. OpenSSL doesn't exactly support the mac, either, but since we have the source code

Re: OpenSSL on Mac (Was: Can US companies use OpenSSL?)

1999-09-14 Thread Roy Wood
CJ Holmes [EMAIL PROTECTED] writes: We've done it here at StarNINE for our WebSTAR product http://www.webstar.com/, mainly because the alternatives are vastly more expensive and don't support the Mac platform. OpenSSL doesn't exactly support the mac, either, but since we have the source code

Re: OpenSSL and Mac OS and export fun

1999-01-17 Thread Nicolas Roumiantzeff
Fred wrote (talking about NSA): 56-bit DES is no problem. 56-bit restricted RSA is no problem. 3DES is not allowed. In general, they seemed to imply 56 bits of anything is no problem, but I'll have to double check that. Probably if there were such as thing as 128-bit rot13 is would not

Re: OpenSSL and Mac OS and export fun

1999-01-17 Thread Ben Laurie
Wilfredo Sanchez wrote: I need some help with making a US-export happy OpenSSL. So I had a phone call with the NSA here and asked them what I can get away with. Note that the conversation was specific to Apple, and not necessarily applicable to my fellow Americans, but I doubt that

Re: OpenSSL and Mac OS and export fun

1999-01-17 Thread Ben Laurie
Lutz Jaenicke wrote: On Fri, Nov 19, 1999 at 10:07:28AM +, Ben Laurie wrote: Depends what you want to do. If you only want to do SSL, then just strip out the ciphersuites you don't want to allow. Note that you'll have to enable the "new" ciphersuites to get 1024/56, and further note