RE: DTLS aborts
Hi, I sent an email to HYPERLINK mailto:r...@openssl.orgr...@openssl.org yesterday, shortly after receiving the reply below, but received nothing in return and did not see a forward on HYPERLINK mailto:openssl-...@openssl.orgopenssl-...@openssl.org. I sent another email to HYPERLINK mailto:r...@openssl.orgr...@openssl.org about an hour ago and still see nothing. I'm following the procedure documented HYPERLINK https://www.openssl.org/support/rt.htmlhere. Have I missed something? Regards, Brian -Original Message- From: Salz, Rich [mailto:rs...@akamai.com] Sent: Monday, July 21, 2014 2:44 PM To: openssl-users@openssl.org Subject: RE: DTLS aborts Is the development team aware of this? Should we open an RT? Please open an RT. -- Principal Security Engineer Akamai Technologies, Cambridge, MA IM: HYPERLINK mailto:rs...@jabber.mers...@jabber.me; Twitter: RichSalz __ OpenSSL Project http://www.openssl.org User Support Mailing ListHYPERLINK mailto:openssl-users@openssl.orgopenssl-users@openssl.org Automated List Manager HYPERLINK mailto:majord...@openssl.orgmajord...@openssl.org
Re: DTLS aborts
On Tue, Jul 22, 2014 at 9:42 AM, Brian Hassink brian.hass...@oracle.com wrote: ... I sent an email to r...@openssl.org yesterday, shortly after receiving the reply below, but received nothing in return and did not see a forward on openssl-...@openssl.org. I'm not sure if the bug report is forwarded to the devs. However, the devs actively monitor the queue. See https://www.openssl.org/about/roadmap.html and https://groups.google.com/forum/#!msg/mailing.openssl.users/mDrMrd3zOuQ/BRS_VLZB_mYJ. I sent another email to r...@openssl.org about an hour ago and still see nothing. I don't believe there's a need to send multiple emails. I'm following the procedure documented here. Have I missed something? Patience. Jeff __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager majord...@openssl.org
RE: DTLS aborts
From: Jeffrey Walton [mailto:noloa...@gmail.com] Sent: Tuesday, July 22, 2014 3:03 PM On Tue, Jul 22, 2014 at 9:42 AM, Brian Hassink brian.hass...@oracle.com wrote: ... I sent an email to r...@openssl.org yesterday, shortly after receiving the reply below, but received nothing in return and did not see a forward on openssl-...@openssl.org. I'm not sure if the bug report is forwarded to the devs. New bugs and updates sent to RT should automatically get copied as email to openssl-dev, and usually do. However, the devs actively monitor the queue. See https://www.openssl.org/about/roadmap.html and https://groups.google.com/forum/#!msg/mailing.openssl.users/mDrMrd3zOuQ/BRS_VLZB_mYJ. That's only useful if a new report finds its way onto the queue. Lack of email suggests that this one hasn't, and a search of RT says the last new report to mention DTLS was raised 11 months ago which seems to confirm it. I sent another email to r...@openssl.org about an hour ago and still see nothing. I don't believe there's a need to send multiple emails. I'm following the procedure documented here. Have I missed something? Patience. Possibly, but this does seem inordinately slow. If it were me, I'd assume something was wrong. __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager majord...@openssl.org
Re: DTLS aborts
However, the devs actively monitor the queue. See https://www.openssl.org/about/roadmap.html and https://groups.google.com/forum/#!msg/mailing.openssl.users/mDrMrd3zOuQ/BRS_VLZB_mYJ. That's only useful if a new report finds its way onto the queue. Lack of email suggests that this one hasn't, and a search of RT says the last new report to mention DTLS was raised 11 months ago which seems to confirm it. Well, a lot has changed in the last few months, since the project has received more attention and funding. Its been my observation that the emails are tended to on a daily basis (if not more frequently). Reports in RT are acted upon more quickly and more frequently also. If the email has been tended to but its not in the queue, then I suspect something else is going on. My guess (and its purely speculation) is the report is being held because of security considerations. The crash described is a DoS, and that affects availability of an OpenSSL based server. I would expect it to be more ture if the report has sample code to reproduce the crash. But again, its purely speculation. Jeff __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager majord...@openssl.org
RE: DTLS aborts
My guess (and its purely speculation) is the report is being held because of security considerations. I don't believe so; there's no filter on email sent to rt. Interestingly, there are a few bugs created a day ago, and then a few created four days ago. Looks like mail got lost or is in-transit or something? -- Principal Security Engineer, Akamai Technologies, Cambridge, MA IM: rs...@jabber.me; Twitter: RichSalz
RE: DTLS aborts
Just got a reply on the RT about 10 minutes ago :) Looks like things are just slow. -Brian -Original Message- From: Salz, Rich [mailto:rs...@akamai.com] Sent: Tuesday, July 22, 2014 5:22 PM To: openssl-users@openssl.org Subject: RE: DTLS aborts My guess (and its purely speculation) is the report is being held because of security considerations. I don't believe so; there's no filter on email sent to rt. Interestingly, there are a few bugs created a day ago, and then a few created four days ago. Looks like mail got lost or is in-transit or something? -- Principal Security Engineer, Akamai Technologies, Cambridge, MA IM: rs...@jabber.me; Twitter: RichSalz __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager majord...@openssl.org __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager majord...@openssl.org
Re: DTLS aborts
On 22/07/14 22:21, Salz, Rich wrote: My guess (and its purely speculation) is the report is being held because of security considerations. I don't believe so; there's no filter on email sent to rt. Interestingly, there are a few bugs created a day ago, and then a few created four days ago. Looks like mail got lost or is in-transit or something? There is a filter to prevent large amounts of spam in RT. Sometimes it can take a little while for posts to come through. Matt __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager majord...@openssl.org
RE: DTLS aborts
Is the development team aware of this? Should we open an RT? Please open an RT. -- Principal Security Engineer Akamai Technologies, Cambridge, MA IM: rs...@jabber.me; Twitter: RichSalz __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager majord...@openssl.org
