[openssl.org #774] problem installing openssl-0.9.4

2003-11-20 Thread Lutz Jaenicke via RT
[EMAIL PROTECTED] - Wed Nov 19 19:56:49 2003]: Hi, when i run ./config i get: Operating system: sun4u-sun-solaris2 ./config: test: unknown operator (GCC) OpenSSL-0.9.4 is outdated and buggy (including security issues). Please upgrade to 0.9.7c or at least to 0.9.6l. It may be the case

Verification of cert w/o keyCertSign

2003-11-20 Thread Dave Roberts
Had an issue recently with a self-signed certificate that contained keyUsage extensions marked as critical. A number of KU flags were set, but the keyCertSign flag was not. Attempting to connect to a SSL Server secured using this certificate fails as the OpenSSL verification routines throw it

Re: Verification of cert w/o keyCertSign

2003-11-20 Thread Dr. Stephen Henson
On Thu, Nov 20, 2003, Dave Roberts wrote: Had an issue recently with a self-signed certificate that contained keyUsage extensions marked as critical. A number of KU flags were set, but the keyCertSign flag was not. Attempting to connect to a SSL Server secured using this certificate fails

[openssl.org #772] 32/64-bit detection on HPUX 11.11 with GCC

2003-11-20 Thread Andy Polyakov via RT
Fix addressing this problem is in HEAD branch now. Please download ftp://ftp.openssl.org/snapshot/openssl-SNAP-20031121.tar.gz as it becomes available and verify if ./config works as expected. Secondly. The snapshot in question adds new target, namely hpux64-parisc2-gcc [with assembler support

Stalling hardware randomness a possible problem.

2003-11-20 Thread Richard Levitte - VMS Whacker
Yesterday, people at Infrasec Sweden AB (http://www.infrasec.se/) and me spent the better part of the day tracing through a program that uses SSL with an nCipher box and figuring out what exactly made about every 15th SSL_accept stall for half a second. We guessed there was something happening

Re: Stalling hardware randomness a possible problem.

2003-11-20 Thread Dr. Stephen Henson
On Fri, Nov 21, 2003, Richard Levitte - VMS Whacker wrote: Yesterday, people at Infrasec Sweden AB (http://www.infrasec.se/) and me spent the better part of the day tracing through a program that uses SSL with an nCipher box and figuring out what exactly made about every 15th SSL_accept stall

Re: Stalling hardware randomness a possible problem.

2003-11-20 Thread Richard Levitte - VMS Whacker
In message [EMAIL PROTECTED] on Fri, 21 Nov 2003 01:33:01 +0100, Dr. Stephen Henson [EMAIL PROTECTED] said: steve On Fri, Nov 21, 2003, Richard Levitte - VMS Whacker wrote: steve steve Yesterday, people at Infrasec Sweden AB (http://www.infrasec.se/) and steve me spent the better part of the

Re: Stalling hardware randomness a possible problem.

2003-11-20 Thread Geoff Thorpe
Howdy, On November 20, 2003 06:56 pm, Richard Levitte - VMS Whacker wrote: So, an idea could be, at least for the hw_ncipher.c/e_ncipher.c code to use the nCipher RNG only to seed the internal OpenSSL pool. We made a hack yesterday that gave exactly that effect, and it gave much better

Re: Stalling hardware randomness a possible problem.

2003-11-20 Thread Richard Levitte - VMS Whacker
In message [EMAIL PROTECTED] on Thu, 20 Nov 2003 20:20:18 -0500, Geoff Thorpe [EMAIL PROTECTED] said: geoff Howdy, geoff geoff On November 20, 2003 06:56 pm, Richard Levitte - VMS Whacker wrote: geoff So, an idea could be, at least for the hw_ncipher.c/e_ncipher.c code geoff to use the