Re: [openssl-users] What does EC_KEY_get0_public_key deliver?

2015-01-08 Thread Matt Caswell
On 09/01/15 00:05, Christian Weber wrote: Thanks Matt, i just assumed the BIGNUMs were the coordinates without any projection - obviously that assumption was wrong - mislead by the funtions name. What interests me is to how you accessed the BIGNUMs in the first place! The EC_POINT

Re: [openssl-users] [openssl-announce] OpenSSL version 1.0.1k released

2015-01-08 Thread Dongsheng Song
test failure on custom build: perl Configure ^ no-comp no-dso no-idea no-ssl2 no-ssl3 no-psk no-srp ^ --prefix=D:/var/pool/openssl-win32 ^ VC-WIN32 ... D:\var\tmp\openssl-1.0.1knmake -f ms\ntdll.mak ... D:\var\tmp\openssl-1.0.1knmake -f ms\nt.mak test Microsoft (R) Program

Re: [openssl-users] What does EC_KEY_get0_public_key deliver?

2015-01-08 Thread Christian Weber
Thanks Matt, i just assumed the BIGNUMs were the coordinates without any projection - obviously that assumption was wrong - mislead by the funtions name. However, we're operating on brainpool curves, so the latter function should do the job. I'll lookup the parameters and try tomorrow. MfG --

[openssl-users] How to construct certificate chain when missing intermediate CA

2015-01-08 Thread Jerry OELoo
Hi All: I am using X509_STORE_CTX_get1_chain() to get web site's full certificate chain. Now I am encounter an issue that some web site does not return intermediate CA certificate but only web site leaf certificate. For example. https://globaltrade.usbank.com Below is certificate I get.

[openssl-users] Build failure in 1.0.1k on Windows

2015-01-08 Thread Perrow, Graeme
I just downloaded 1.0.1k and when trying to build it on Windows (using Visual Studio 10.0), I get a compile error: .\crypto\cversion.c(80) : error C2065: 'cflags' : undeclared identifier .\crypto\cversion.c(80) : warning C4047: 'return' : 'const char *' differs in levels of indirection from

Re: [openssl-users] What does EC_KEY_get0_public_key deliver?

2015-01-08 Thread Matt Caswell
On 08/01/15 17:16, Christian Weber wrote: Dear OpenSSL-Users, recently i found a pitfall using EC_KEY_get0_public_key(key-pkey.ec). The function just returns a copy to a pointer to key-pub_key which is a EC_POINT pointer. The key itself is taken from a certificate using EVP_PKEY *key =

Re: [openssl-users] openssl-1.0.1k - undeclared identifier

2015-01-08 Thread Matt Caswell
On 08/01/15 18:19, Guy wrote: Hello, I try to buld openssl-1.0.1k with Visual Studio... PERL Configure VC-WIN32... ms\do_nasm NMAKE -f ms\ntdll.mak and have one error: .\crypto\cversion.c(80) : error C2065: 'cflags' : undeclared identifier This is a known issue with

Re: [openssl-users] OpenSSL version 1.0.1k released

2015-01-08 Thread Kevin Layer
Anyone having trouble building on Windows? cl /Fotmp32dll\cversion.obj -Iinc32 -Itmp32dll /MD /Ox /O2 /Ob2 -DOPENSSL_THREADS -DDSO_WIN32 -W3 -Gs0 -GF -Gy -nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_MEAN -DL_ENDIAN -D_CRT_SECURE_NO_DEPRECATE -DOPENSSL_USE_APPLINK -I.

Re: [openssl-users] OpenSSL version 1.0.1k released

2015-01-08 Thread Kevin Layer
With a more modern 64-bit MS compiler, I still get a failure. I see that Cygwin released theirs, so I'm guessing this is a MS compiler issue. cl /Fotmp32dll\cversion.obj -Iinc32 -Itmp32dll /MD /Ox -DOPENSSL_THREADS -DDSO_WIN32 -W3 -Gs0 -Gy -nologo -DOPENSSL_SYSNAME_WIN32

Re: [openssl-users] OpenSSL version 1.0.1k released

2015-01-08 Thread Scott Neugroschl
The C4047 is just a warning. The C2065 is a known issue, per Matt. -Original Message- From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf Of Kevin Layer Sent: Thursday, January 08, 2015 1:13 PM To: openssl-users@openssl.org Subject: Re: [openssl-users] OpenSSL

Re: [openssl-users] [Bulk] Build failure in 1.0.1k on Windows

2015-01-08 Thread Gisle Vanem
Perrow, Graeme wrote: I just downloaded 1.0.1k and when trying to build it on Windows (using Visual Studio 10.0), I get a compile error: .\crypto\cversion.c(80) : error C2065: 'cflags' : undeclared identifier .\crypto\cversion.c(80) : warning C4047: 'return' : 'const char *' differs in

[openssl-users] OpenSSL version 1.0.1k released

2015-01-08 Thread OpenSSL
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 1.0.1k released === OpenSSL - The Open Source toolkit for SSL/TLS http://www.openssl.org/ The OpenSSL project team is pleased to announce the release of version 1.0.1k of our open source

[openssl-users] OpenSSL version 0.9.8zd released

2015-01-08 Thread OpenSSL
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 0.9.8zd released === OpenSSL - The Open Source toolkit for SSL/TLS http://www.openssl.org/ The OpenSSL project team is pleased to announce the release of version 0.9.8zd of our open

[openssl-users] OpenSSL version 1.0.0p released

2015-01-08 Thread OpenSSL
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 1.0.0p released === OpenSSL - The Open Source toolkit for SSL/TLS http://www.openssl.org/ The OpenSSL project team is pleased to announce the release of version 1.0.0p of our open source

[openssl-users] What does EC_KEY_get0_public_key deliver?

2015-01-08 Thread Christian Weber
Dear OpenSSL-Users, recently i found a pitfall using EC_KEY_get0_public_key(key-pkey.ec). The function just returns a copy to a pointer to key-pub_key which is a EC_POINT pointer. The key itself is taken from a certificate using EVP_PKEY *key = X509_get_pubkey(cert); Fine, i assumed, these

[openssl-users] OpenSSL Security Advisory

2015-01-08 Thread OpenSSL
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL Security Advisory [08 Jan 2015] === DTLS segmentation fault in dtls1_get_record (CVE-2014-3571) === Severity: Moderate A carefully crafted DTLS