[openssl-users] disable tls renegotiation to avoid the risk of OCSP Status Request extension unbounded memory growth

2016-09-22 Thread ????????
Hi guys can i avoid the risk of "OCSP Status Request extension unbounded memory growth" if i disable server's tls renegotiation ? in deed, nginx diable tls renegotiation by default since 0.8.23.-- openssl-users mailing list To unsubscribe:

Re: [openssl-users] OpenSSL 102 stable Git no-tls1 unknown option

2016-09-22 Thread Oliver Niebuhr
On 22.09.2016 16:42, Salz, Rich wrote: > It's no-tls > > Thanks to Matt Caswell and Richard Levitte for todays "mk1mf.pl: check for no-tls1 here as well" it compiles now :) This works probably as expected: Side Effect: I cant use s_client $somedomain:443 -tls1 (-tls1_1 / -tls1_2) anymore to

Re: [openssl-users] OpenSSL 102 stable Git no-tls1 unknown option

2016-09-22 Thread Salz, Rich
It's no-tls -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

[openssl-users] OpenSSL Security Advisory

2016-09-22 Thread OpenSSL
.8 and 1.0.0 ended on 31st December 2015. Those versions are no longer receiving security updates. References == URL for this Security Advisory: https://www.openssl.org/news/secadv/20160922.txt Note: the online version of the advisory may be updated with additional details over time. For

[openssl-users] OpenSSL version 1.1.0a published

2016-09-22 Thread OpenSSL
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 1.1.0a released === OpenSSL - The Open Source toolkit for SSL/TLS https://www.openssl.org/ The OpenSSL project team is pleased to announce the release of version 1.1.0a of our open

[openssl-users] OpenSSL version 1.0.2i published

2016-09-22 Thread OpenSSL
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 1.0.2i released === OpenSSL - The Open Source toolkit for SSL/TLS https://www.openssl.org/ The OpenSSL project team is pleased to announce the release of version 1.0.2i of our open

[openssl-users] OpenSSL version 1.0.1u published

2016-09-22 Thread OpenSSL
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 1.0.1u released === OpenSSL - The Open Source toolkit for SSL/TLS https://www.openssl.org/ The OpenSSL project team is pleased to announce the release of version 1.0.1u of our open

Re: [openssl-users] Failed to install OpenSSL 1.1.0 using 'nmake install'

2016-09-22 Thread Jing Liu
Thanks for all people who kindly helped me. My problem is solved. I uninstalled ActivePerl 5.12.2 and instead installed the current version - ActivePerl 5.24.0.2400 (64bit). Now, I compiled and installed OpenSSL 1.1.0 successfully. Cheers, Jing -Original Message- From: openssl-users

Re: [openssl-users] Failed to install OpenSSL 1.1.0 using 'nmake install'

2016-09-22 Thread Jeffrey Walton
On Wed, Sep 21, 2016 at 8:35 AM, Jing Liu wrote: > I’ve tried all my best to solve this problem but failed. Can you help me? > > - OS: Windows 10 > > - Perl: ActivePerl 5.12.2 build 1202 > > - Development environment: MS Visual Studio 2010 SP1 > > - OpenSSL version: OpenSSL

[openssl-users] OpenSSL 102 stable Git no-tls1 unknown option

2016-09-22 Thread Oliver Niebuhr
Good morning. I just created a local Git Branch and switched to 1.0.2-stable. I hoped the Commit "Fix the no-tls1 option" with ID 847fe929108da550b506594f52fa1875ea815723 would have finally fixed it but sadly it is still broken. Or I am getting something wrong. Configure Options: perl Configure

Re: [openssl-users] Failed to install OpenSSL 1.1.0 using 'nmake install'

2016-09-22 Thread Jing Liu
Dear Richard, I already checkded that the file "applink.c" does exist under the directory 'D:\openssl-1.1.0\ms'. I also considered the problem of access permission. That is why I ran all the commands as an administrator. Now, I used the Perl script provided by you to revise the original