Richard, Oh my. So, these patches have not been incorporated? Will they ever get incorporated?
We did not know these patches existed. We've been chasing this problem for a couple of years now. Because we've never received response to postings with regard to this problem, we felt we were on our own. We WERE using 0.9.7d, when the problem arose. I've submitted two patches, same patch, but for 97m and 98e. (of course, the patches I've submitted only solve OUR problem, and probably don't address the issue to the extent the patches that have already been created) As the existing patches do not fit directly into 97d and 98e (for 64 bit), I'm not sure how to proceed. Because of several platforms involved, in addition to z/OS (OS390-Unix), we need to use these releases of OpenSSL for our new release. Any advice you might offer would be greatly appreciated. Thanks, John B. Young --- Richard Koenning <[EMAIL PROTECTED]> wrote: > JBYTuna via RT wrote: > > > When an OpenSSL server built on z/OS is using client verification, the > > following error is incurred: > > > > 0x140890b2 - error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no > > certificate returned > > > >>From tracing, we found the correct certificate was being returned. We > found > > the code in crypto/x509/x509_vfy.c will not work in an EBCDIC environment, > as > > the data is in ASCII. The solution is to translate the ASCII to EBCDIC, > prior > > to the validation process. > > > > John B. Young > > > > Here's the patch, in diff -u form: > > The patch is already contained in "#843: EBCDIC patches for 0.9.7c" > (http://rt.openssl.org/Ticket/Display.html?id=843&user=guest&pass=guest), > which has been updated to 0.9.7j by Jeremy Grieshop. That patch contains > also a second ASCII to EBCDIC conversion after the X509_time_adj in the > region of line 960. > Ciao, > Richard > -- > Dr. Richard W. Könning > Fujitsu Siemens Computers GmbH > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > Development Mailing List openssl-dev@openssl.org > Automated List Manager [EMAIL PROTECTED] > ____________________________________________________________________________________ Looking for last minute shopping deals? Find them fast with Yahoo! Search. http://tools.search.yahoo.com/newsearch/category.php?category=shopping ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager [EMAIL PROTECTED]
