From: Bill Rebey <[EMAIL PROTECTED]>

Bill.Rebey> 1)  Building with 'no-rsa' (compiler: -DNO_RSA) causes
Bill.Rebey> link errors on UNIX.  I "fixed" the problem, but my fix

I just tested with just no-rsa no a Solaris machine using GNU c, and
it went through with no errors.

Bill.Rebey> Specifically, I was building with "no-rsa no-rc4 no-rc5
Bill.Rebey> no-idea no-bf"

Hmm, that's a little bit more than just no-rsa :-)...  I guess I'll
have to try that as well...

Bill.Rebey> 2)  SSL_CTX_set_tmp_dh hangs.  (It didn't with the
Bill.Rebey> distribution of 9.5a, but it does with the new snapshot).
Bill.Rebey> Ultimately, SSL_CTX_set_tmp_dh ends up calling
Bill.Rebey> 'ssleay_rand_bytes', which then calls
Bill.Rebey> 'ssleay_rand_add'. The problem appears to be that
Bill.Rebey> 'ssleay_rand_bytes' calls
Bill.Rebey> CRYPTO_w_lock(CRYPTO_LOCK_RAND)', and then
Bill.Rebey> 'ssleay_rand_add' calls CRYPTO_w_lock(CRYPTO_LOCK_RAND)'
Bill.Rebey> again before it gets unlocked, causing a deadlock. 

As you yourself observed, there is this new section of code inside the
check on do_stir_pool which isn't there in 0.9.5a.  I've added code so
it's possible to have ssleay_rand_add *not* do any locking.  Perhaps
not the nicest thing in the world, but I'm a bit paranoid about what
happens if two or more threads do the stirring loop at the same time...

Bill.Rebey> 4)  I'm still tracking down that sporadic crash in
Bill.Rebey> lh_retrieve.  Any ideas would be appreciated.

I'll look into that later today...

-- 
Richard Levitte   \ Spannvägen 38, II \ [EMAIL PROTECTED]
Chairman@Stacken   \ S-168 35  BROMMA  \ T: +46-8-26 52 47
Redakteur@Stacken   \      SWEDEN       \ or +46-709-50 36 10
Procurator Odiosus Ex Infernis                -- [EMAIL PROTECTED]
Member of the OpenSSL development team: http://www.openssl.org/
Software Engineer, Celo Communications: http://www.celocom.com/

Unsolicited commercial email is subject to an archival fee of $400.
See <http://www.stacken.kth.se/~levitte/mail/> for more info.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to