Re: [openssl.org #2810] problem with openssl 1.0.1b

2012-05-11 Thread Dean Carter via RT
I originally thought my problem was with ssh, so that is what I was looking it, after I finally found that the problem was with the ssl, I sent the email to you. After that I did some more testing and found that by using the no-asm flag during the config everything worked normally. I guess my

Re: AES performance when using FIPS 2.0 Object Module

2012-05-11 Thread John Foley
Thanks for the information, that explains it. The vpaes-x86 module isn't included in the FIPS module. The CPU information is: model name: Intel(R) Core(TM) i7 CPU Q 720 @ 1.60GHz On 05/11/2012 09:07 AM, Andy Polyakov wrote: >> Is AES performance expected to be much lower when usi

Re: AW: [openssl.org #2805] uplink-x86_64-pl-script error when running "ms\do_win64a" on windows 7-64bit command line

2012-05-11 Thread Andy Polyakov via RT
>> how come it's not required in all other perlasm modules? > errors do also occure in other perlasm modules, but i'am running this > configure command without asm support which avoids calling other > perlasm modules? > > perl Configure debug-VC-WIN64A no-asm --prefix=x64/debug > > I have two pe

[openssl.org #2811] Resolved: TLSv1.1+ renegotiation broken

2012-05-11 Thread Stephen Henson via RT
According to our records, your request has been resolved. If you have any further questions or concerns, please respond to this message. __ OpenSSL Project http://www.openssl.org Development Mailing

[openssl.org #2813] Resolved: Deadlock in openssl-0.9.8x

2012-05-11 Thread Stephen Henson via RT
According to our records, your request has been resolved. If you have any further questions or concerns, please respond to this message. __ OpenSSL Project http://www.openssl.org Development Mailing

[openssl.org #2813] Deadlock in openssl-0.9.8x

2012-05-11 Thread Stephen Henson via RT
> [openssl-dev@openssl.org - Fri May 11 14:35:45 2012]: > > The code below deadlocks against itself in some systems because > EVP_PKEY_free call CRYPTO_add with CRYPTO_LOCK_EVP_PKEY. > Should be fixed with: http://cvs.openssl.org/chngview?cn=22568 Thanks for the report. Steve. -- Dr Stephen N

[openssl.org #2811] TLSv1.1+ renegotiation broken

2012-05-11 Thread Stephen Henson via RT
> [openssl-dev@openssl.org - Fri May 11 02:12:15 2012]: > > This is a problem reproducible with s_client / s_server. > > > OpenSSL 1.0.1b and just reconfirmed present in 1.0.1c. > > Server: > openssl s_server -cert spodhuis-smtpmx.crt.pem -key spodhuis- > smtpmx.key.pem > > Client: > opens

Re: [openssl.org #2810] problem with openssl 1.0.1b

2012-05-11 Thread Andy Polyakov via RT
> I built both a aix 5.2 / 32 bit version of openssl 1.0.1b and a aix 6.1 > / 64 bit version. I also did a build of the latest openssh. When > testing the 32 bit openssh I had some problems that seem to come from > running ssh-keygen. > > The aix 6.1 / 64 bit version runs fine with out probl

Re: AES performance when using FIPS 2.0 Object Module

2012-05-11 Thread Andy Polyakov
> Is AES performance expected to be much lower when using the FIPS 2.0 > Object Module? Which CPU? You said it's non-AES-NI-capable, but is it SSSE3-capable? If yes, then see "related note" at http://www.mail-archive.com/openssl-dev@openssl.org/msg29827.html. > Below are the speed results when us

AES performance when using FIPS 2.0 Object Module

2012-05-11 Thread John Foley
Is AES performance expected to be much lower when using the FIPS 2.0 Object Module? Below are the speed results when using AES-128-CBC with and w/o the FIPS module. The host system is 32-bit Linux using gcc 4.4.3. The host system does not have AES-NI support. No additional config arguments were

SHA-256 implementation improvement

2012-05-11 Thread Pavel Semjanov
Hello again, as I promised, here is the optimized code for SHA-256 hash, x86 platform. Should work faster on Core 2/iX up to 20%. This code you are free to use (or modify) in any form on OpenSSL and GRYPTOGAMS. I guess you should make it PIC, as any other code for x86 (I didn't make it becaus

[openssl.org #2812] BUG: infinite loop when using s_client's xmpp starttls operation

2012-05-11 Thread Daniel Llewellyn via RT
When using the following command to connect to an xmpp server which uses a different hostname to the published ssl certificate and jabber domain openssl goes into an infinite loop. $ openssl s_client -starttls xmpp -connect some.jabber.server -debug CONNECTED(0003) write to 0x7ff873c1f130 [0

Deadlock in openssl-0.9.8x

2012-05-11 Thread Constantine Sapuntzakis
The code below deadlocks against itself in some systems because EVP_PKEY_free call CRYPTO_add with CRYPTO_LOCK_EVP_PKEY. -Costa --- openssl-0.9.8t/crypto/asn1/x_pubkey.c 2005-07-16 04:13:04.0 -0 700 +++ openssl-0.9.8x/crypto/asn1/x_pubkey.c 2012-05-10 10:51:28.0 -0 700