Could not compile 0.9.7 SNAP for WIN32
Hello, I have downloaded the most recent snapshot of 9.7 and tried to compiled it with VC-WIN32 option. But there seem to be certain small issues due to which it does not compile: The following files are giving me errors: 1. crypto\engine\hw_nuron.c 2. crypto\rand\rand_win.c 3. ms\libeay32.def: unresolved symbols: EVP_DigestInit_dbg EVP_dev_crypto_des_ede3_cbc EVP_dev_crypto_md5 EVP_dev_crypto_rc4 des_release_key Also some of the test do not compile. How can I fix these so that I can compile properly. Thanks in Advance, Bhavin - Original Message - From: Ben Laurie [EMAIL PROTECTED] To: OpenSSL Dev [EMAIL PROTECTED] Sent: Wednesday, September 05, 2001 1:06 AM Subject: 0.9.7 We're thinking about moving towards a 0.9.7 release, once a few more things have been ironed out. However, there is much new code that needs thorough testing, particularly the ASN.1 rewrite. We'd be grateful if people would start to work with current snapshots and report problems they find. Cheers, Ben. -- http://www.apache-ssl.org/ben.html There is no limit to what a man can do or how far he can go if he doesn't mind who gets the credit. - Robert Woodruff __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
Re: 0.9.7
Ryan Hurst wrote: Is the new ASN1 code complete? Or it they still be changing? The code may well change to support things like stream based I/O (instead of memory based I/O) and some new features may be added such as a generalized ASN1 printing routines or value setting. However the new macros shouldn't change too much and anything using them should be able to take advantage of future enhancements. Steve. -- Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/ Personal Email: [EMAIL PROTECTED] Senior crypto engineer, Celo Communications: http://www.celocom.com/ Core developer of the OpenSSL project: http://www.openssl.org/ Business Email: [EMAIL PROTECTED] PGP key: via homepage. __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
Re: Could not compile 0.9.7 SNAP for WIN32
Bhavin Shah wrote: Hello, I have downloaded the most recent snapshot of 9.7 and tried to compiled it with VC-WIN32 option. But there seem to be certain small issues due to which it does not compile: The following files are giving me errors: 1. crypto\engine\hw_nuron.c 2. crypto\rand\rand_win.c What errors? 3. ms\libeay32.def: unresolved symbols: EVP_DigestInit_dbg EVP_dev_crypto_des_ede3_cbc EVP_dev_crypto_md5 EVP_dev_crypto_rc4 des_release_key Also some of the test do not compile. Again, what errors? Cheers, Ben. How can I fix these so that I can compile properly. Thanks in Advance, Bhavin - Original Message - From: Ben Laurie [EMAIL PROTECTED] To: OpenSSL Dev [EMAIL PROTECTED] Sent: Wednesday, September 05, 2001 1:06 AM Subject: 0.9.7 We're thinking about moving towards a 0.9.7 release, once a few more things have been ironed out. However, there is much new code that needs thorough testing, particularly the ASN.1 rewrite. We'd be grateful if people would start to work with current snapshots and report problems they find. Cheers, Ben. -- http://www.apache-ssl.org/ben.html There is no limit to what a man can do or how far he can go if he doesn't mind who gets the credit. - Robert Woodruff __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] -- http://www.apache-ssl.org/ben.html There is no limit to what a man can do or how far he can go if he doesn't mind who gets the credit. - Robert Woodruff __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
Re: cvs commit: openssl/crypto/engine enginetest.c
[EMAIL PROTECTED] wrote: - free((char *)(ENGINE_get_id(block[loop]))); - free((char *)(ENGINE_get_name(block[loop]))); + OPENSSL_free((char *)(ENGINE_get_id(block[loop]))); + OPENSSL_free((char *)(ENGINE_get_name(block[loop]))); Why the casts? Cheers, Ben. -- http://www.apache-ssl.org/ben.html There is no limit to what a man can do or how far he can go if he doesn't mind who gets the credit. - Robert Woodruff __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
HUNT/FISH/SPORTMEN
HUNT/FISH/SPORTMEN We were surprised to learn that Hunting/Fishing/Sportsman is THE most popular use of Golf Cars. Golf is #3 We have the biggest and best website on the net with Golf Car Accessories and Maintenance Repair Parts for nearly every Golf Car ever made. We also have extensive helpful and free information on Golf Cars and the industry. If you or your facility use golf cars, we think you will find our website very useful. For more information go to http://www.golfcarcatalog.com/infopages/huntfish-info.htm This is a one-time e-mail. By not responding, you will automatically be taken off our mailing list. GolfCarCatalog.Com 9647 US Highway South Banner Elk NC 28604 828 963 6775 __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
Long file names
I'm building OpenSSL on MSDOS, but have problems with long filenames. My untar program silently overwrites e.g. ./crypto/engine/engine_err.c with ./crypto/engine/engine_evp.c. Could you *please* make the engine- files 8+3 compliant. Gisle V. __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
Re: Long file names
I'm building OpenSSL on MSDOS, but have problems with long filenames. My untar program silently overwrites e.g. ./crypto/engine/engine_err.c with ./crypto/engine/engine_evp.c. Could you *please* make the engine- files 8+3 compliant. Gisle V. Can you build on a non-DOS platform? We had this problem with Kerberos many years ago and it was decided that we would not restrict file names to 8.3 notation because doing so resulted in names that were too cryptic. It became impossible to figure out what the file was supposed to do. Instead we decided that all DOS and Windows 3.x builds would have to be made on a system (Win9x or NT) that understood long file names. Jeffrey Altman * Sr.Software Designer C-Kermit 8.0 Beta available The Kermit Project @ Columbia University includes Secure Telnet and FTP http://www.kermit-project.org/ using Kerberos, SRP, and [EMAIL PROTECTED] OpenSSL. SSH soon to follow. __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
RE: less than 1024 rsa key
The problem you are running into (probably) is that an RSA key cannot encrypt data that is larger than the key size. In your case, a 64 bit RSA key would not be able to encrypt the signature hash since the hash is 128 bits long. As a security point, RSA keys less than 512 bits are generally considered to be insufficiently secure (64 bits would be incredibly weak). -lee -Original Message-From: Tony Lu [mailto:[EMAIL PROTECTED]]Sent: Wednesday, September 05, 2001 5:08 PMTo: [EMAIL PROTECTED]Subject: less than 1024 rsa key Can anybody tell me how to create a certificate which key size is less than 1024? C:\test\openssl\out32dllopenssl genrsa -out lsg1.key 64Loading 'screen' into random state - donewarning, not much extra random data, consider using the -rand optionGenerating RSA private key, 64 bit long modulus..+++.+++e is 65537 (0x10001) C:\test\openssl\out32dllopenssl req -new -x509 -days 365 -key lsg1.key -out lsg1.crtUsing configuration from openssl.cnfYou are about to be asked to enter information that will be incorporatedinto your certificate request.What you are about to enter is what is called a Distinguished Name or a DN.There are quite a few fields but you can leave some blankFor some fields there will be a default value,If you enter '.', the field will be left blank.-Country Name (2 letter code) [AU]:caState or Province Name (full name) [Some-State]:dkdkLocality Name (eg, city) []:dldldOrganization Name (eg, company) [Internet Widgits Pty Ltd]:dkkdOrganizational Unit Name (eg, section) []:kdkdCommon Name (eg, YOUR name) []:dkkdkdEmail Address []:kdkdkdkd4293375799:error:04075070:rsa routines:RSA_sign:digest too big for rsa key:.\crypto\rsa\rsa_sign.c:114:4293375799:error:0D072006:asn1 encoding routines:ASN1_sign:bad get asn1 object call:.\crypto\asn1\a_sign.c:129:
Better than Sex! Register your .Sex Domain! 58876
The latest domain name extension is here .SEX!!! It's the fresh ,new, exciting web address that is taking the world by storm. Who wants to be .com when you can now be .SEX Register your .SEX domain name today exclusively at: http://www.dotsex.com - To be taken off the mailing list please click below: http://195.178.213.33/unsubscribe.phtml __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
Re: Long file names
On Thu, 6 Sep 2001, Gisle Vanem wrote: I'm building OpenSSL on MSDOS, but have problems with long filenames. My untar program silently overwrites e.g. ./crypto/engine/engine_err.c with ./crypto/engine/engine_evp.c. Could you *please* make the engine- files 8+3 compliant. Although 8+3 compliant names would be best, you can prevent overwriting by using DJTARX to untar rather than GNU tar. DJTARX will ask you to rename each file that would otherwise be overwriten. It should be possible to rename files to be 8+3 compatible without sacrificing information in the names. At least the DJGPP compiling tools accept truncated names. Thus, you would need to rename files so that identifying information is in the first 8+3. For instance files such as engine_err.c and engine_evp.c could be renamed to err_engine.c and evp_engine.c. These would truncate to err_engi.c and evp_engi.c. If the makefile refers to err_engine.c and evp_engine.c, the appropriate files will be found. Thus you don't need 8+3 compliant filenames in the distribution; you just need filenames that are unique when truncated to 8+3. Doug __ Doug Kaufman Internet: [EMAIL PROTECTED] __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
Re: Could not compile 0.9.7 SNAP for WIN32
On Thu, Sep 06, 2001, Ben Laurie wrote: 1. crypto\engine\hw_nuron.c 2. crypto\rand\rand_win.c What errors? I fixed those, but the mkdef.pl script doesn't ignore the OpenBSD stuff. Can someone look into that? Steve? 3. ms\libeay32.def: unresolved symbols: EVP_DigestInit_dbg EVP_dev_crypto_des_ede3_cbc EVP_dev_crypto_md5 EVP_dev_crypto_rc4 __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
Version 15 of the Implementor's Guide for X.500
Version 15 of the guide can be found in bookmarked PDF at ftp://ftp.bull.com/pub/OSIdirectory/DefectResolution/Implementor%27sGuideV15.pdf The version contains a defect summary, TCs correcting errors, and DTCs under ballot for the 3rd and 4th edition. Those still interested in the 2nd edition should keep Version 14 of the guide. Although this guide contains corrections to all the parts of the X.500 recommendation, bookmarks point directly to the TCs for both editions of X.509. The file is about 1.3 MB in size hout __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
Hottest box on the market! 23
RECEIVE ALL YOUR CABLE CHANNELS TODAY!!! 1-888-699-0208 With our NEW GLOBAL 2600 Cable Converter/Decoder! Get all your favorite premium channels like HBO, Spice, Cinemax, ESPN PayPer View Etc... Never miss another T.V show again! The GLOBAL 2600 works on 99% of all cable system coast to coast! You will never have to rent or buy another cable box again! 100% Bulletproof! Meaning it will never get deprogrammed! Comes with remote and patch cable cords and has all the great features any cable box would ever have including, Parent Control, Fine Tuning Sleep Timer on the remote etc... Takes less then five minuets to install replacing your existing box, anyone can do it. We are so sure that you will love our product that it comes with a 30-DAY MONEY BACK GUARANTEE! Also comes with a 3 Year Warranty on Parts and Labor! Quantity Discounts are available so please ask. Global 2600 CABLE CONVERTER/DECODER Now On Sale Now For A Limited $339.00. Includes FedEx 2-Day COD delivery! Call 1-888-699-0208 to speak to a sales rep This ad is sent in accordence with all applicable laws to be removed type "remove" in the subject line and sent to : [EMAIL PROTECTED] RECEIVE ALL YOUR CABLE CHANNELS TODAY!!! 1-888-699-0208With our NEW GLOBAL 2600 Cable Converter/Decoder!Get all your favorite premium channels like HBO, Spice, Cinemax, ESPN PayPer View Etc... __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]