Re: Make failure with OpenSSL

2000-02-14 Thread Andy Polyakov
> > Using OpenSSL-0.9.4 on Solaris 2.6 with latests recommended patches > > > > And gcc 2.95.2 > > binutils > > > > but when I run make I get the following error > > > > making all in crypto... > > ( echo "#ifndef MK1MF_BUILD"; \ > > echo " /* auto-generated by crypto/Makefile.ssl for crypto/cver

Re: Make failure with OpenSSL

2000-02-14 Thread Andy Polyakov
> Using OpenSSL-0.9.4 on Solaris 2.6 with latests recommended patches > > And gcc 2.95.2 > binutils > ... > gcc -I. -I../include -DTHREADS -D_REENTRANT -DNO_ASM -DRSAref -O3 > -fomit-frame-pointer -m486 -Wall -DL_ENDIAN -c cryptlib.c > /usr/local/i386-pc-solaris2.6/bin/as: option `-s' is ambigu

Re: Make failure with OpenSSL

2000-02-14 Thread Andy Polyakov
Everyman wrote: > > Using OpenSSL-0.9.4 on Solaris 2.6 with latests recommended patches > > And gcc 2.95.2 > binutils > GNU Bison > GNU Flex > tar 1.13 > GNU make > perl 5.00404 > GNU automake > GNU autoconf > GNU libtool > > I can compile OpenSSL using sh config rsaref > > but when I run make

Re: Compilation of latest SNAPSHOT on HP-UX

2000-02-14 Thread Ulf Möller
On Sun, Feb 13, 2000 at 08:27:13PM +0100, Lutz Jaenicke wrote: > tomorrow morning. I typically call Configure directly, because the "perl" > in the default path is perl4 and a "perl5 Configure hpux10-cc" makes Doesn't config find perl5? ___

RE: PERL Module Problem...

2000-02-14 Thread Salz, Rich
>The program should overwrites it's sensible environment variables as soon as it >has read the content, therefore strongly reducing the problem. Assuming the ones that "ps" shows are in userspace not kernel space. Not always a safe assumption. _

Re: PERL Module Problem...

2000-02-14 Thread Jean-Marc Desperrier
Peter Gutmann wrote: > Dr Stephen Henson <[EMAIL PROTECTED]> writes: > > >Is there any circumstances where the environment isn't safe? I believe extra > >privs are normally needed to read another users processes environment. > > Under DEC Unixen you can read anyone's environment without any extr

Re: openssl-0.9.4 - bug?

2000-02-14 Thread Andy Polyakov
> running redhat linux 6.1 > > tried: openssl-0.9.4 > > --- > [root@x openssl-0.9.4]# ./config -t > Operating system: i686-whatever-linux2 > Configuring for linux-elf > /usr/bin/perl ./Configure linux-elf > [root@x openssl-0.9.4]# > > > speed.o: In function `speed_main': > speed.o(.text+0x

Re: Problems With Open SSL 9.3a Make Test

2000-02-14 Thread Andy Polyakov
> 1) Environment: > HP-UX svwww012 B.10.20 A 9000/735 2008535444 two-user license > gcc version 2.7.2.3 > > 2) Downloaded Package: openssl-0_9_3a_tar This version chosen for max > compatibilty with Net_SSLeay.pm-1.05 (which is my ultimate desire to get > operational) > > 3) Output of openssl v

BN_mont test

2000-02-14 Thread Andy Polyakov
Is it just me or does test_mont ever complete? I mean bits assignment doesn't make any sense to me: BN_rand(&a,100,0,0); /**/ BN_rand(&b,100,0,0); /**/ for (i=0; ihttp://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager

Re: Compilation of latest SNAPSHOT on HP-UX

2000-02-14 Thread Lutz Jaenicke
On Sun, Feb 13, 2000 at 06:27:05PM +0100, Andy Polyakov wrote: > > As for my personal preferences: I would prefer to define this -DMD32_XARRAY > > in "Configure" so that the mechanism is visible and documented. > Makes sense... Grab snapshot later today and check it out. BTW, what are > you used t

Re: Please add UTF8STRING to PRINTABLE

2000-02-14 Thread Jean-Marc Desperrier
Michael Sierchio wrote: > "Rene G. Eberhard (keyon)" wrote: > > > ...Unicode for example is suppored by > > Universal and UTF8. > > I also meant to point out that UTF-8 supports ASCII, but not EBCDIC, for > example (not that I imagine that anyone would want to use the latter...;-) Well, we're ge

Signing CRL with offline CA (was [Fwd: OCSP and CSL]).

2000-02-14 Thread Marc Jadoul
"Salz, Rich" wrote: > > >can CRLs be signed by a certificate that is not the CA certificate > > No. Ok, but may be there is a solution (that i never tried and it might be uncompatible with lot of existing software.) : If i understand well, you do not want to have your CA keys online for securi