Installed openssl-0.9.6d source and built it locally.  Built a PEM
certificate for testing U of W IMAP with SSL.  SSL didn't work,
wouldn't accept the certificate.

Discovered that code still has a double free bug that was reported
back in 2000? :((

Fixed double free by hand by setting pointer to NULL after call to
xxx_free in three locations.  IMAP with SSL now appears to work.

Bug report & fix (discovered on the web) attached.

Here's the version info:

host> /usr/local/ssl/bin/openssl version -a
OpenSSL 0.9.6d 9 May 2002
built on: Thu May 16 20:46:56 ADT 2002
platform: solaris-sparcv9-gcc
options:  bn(64,32) md2(int) rc4(ptr,char) des(idx,cisc,16,long)
idea(int) blowfish(ptr)
compiler: gcc -fPIC -DTHREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H
-mcpu=ultrasparc -O3 -fomit-frame-pointer -Wall -DB_ENDIAN -DBN_DIV2W
-DULTRASPARC -DMD5_ASM

Love the package,
All the best,
Rgds,

-H-

-- 
Harvey M Wamboldt                    ^ E-Mail: [EMAIL PROTECTED]
MDA Inc 1000 Windmill Rd. Suite 60   ^ Fax:    (902)468-2278
Dartmouth NS, B3B 1L7, Canada        ^ Phone:  (902)481-3531
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to