> [[email protected] - Tue Dec 15 09:18:36 2009]:
> 
> If you call just SSL_library_init() and PKCS12_PBE_add some pkcs12 files
> will not be loadable and moreover the openssl will crash due to missing
> checks for ciphers not found. I've reported the crash in a separate
> report. Perhaps the PKCS12_PBE_add should add the algorithms which are
> not added in the SSL_library_init() call but which are used in the
> static PBE algorithms table?
> 

I'm not sure how many apps still use PKCS12_PBE_add() as it has been a
no-op for quite a while. 

I've added 40 bit RC2 to SSL_library_init() which is the only algorithm
missing for the most common type of PKCS#12 file (almost all of them
from browsers). That should mean apps calling SSL_library_init() and not
OpenSSL_add_all_algorithms() will still work.

Steve.
-- 
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [email protected]

Reply via email to