follow-up: 0.9.8 size_t in md5.h breaks ruby ext/openssl

2005-07-14 Thread OpenMacNews
hi brian, i'm coming late to catch your recent thread (_just_ sub'd to opessl-dev) : "Re: [openssl.org #1149] 0.9.8 size_t in md5.h breaks ruby ext/openssl" afaYk, is there a complete resolution and/or follow-on

RE: How to change utc time?

2005-07-14 Thread David Schwartz
> This is a follow on from my last post as the text lost its formatting. > > How do I change the utc time of a certificate to a smaller format > (whilst creating a cert): > 18082107Z - there are lots of zeros in this format, openssl > gives less. There is never more than one way to re

bug? missing link paths to ssl/crypto libs for OpenSSL ver >= 0.9.8; v <= 0.9.7 is OK

2005-07-14 Thread OpenMacNews
hi all, from what i'm seeing, this may be directly a SSL issue .. thought i'd check here! i'm building ssl-dependent pkgs on OSX 10.4.2. i've used my own external builds of OpenSSL for ages, w/ virtually no problems. i've just upgraded from openssl from v0.9.7 --> v0.9.8, built into /usr/

Re: Possible SSL Compression Methods Memory Leak

2005-07-14 Thread Jonathon Green
Hi Again, I've been looking into the below further and if it is a leak then I think the neatest solution isn't to create a separate free function for the compression methods stack, but to free it in EVP_cleanup() in the exact same manner that the ciphers and digests that are dynamically created in

Possible SSL Compression Methods Memory Leak

2005-07-14 Thread Jonathon Green
Hi List, I think that the dynamic allocation of the global stack of compression methods (ssl_comp_methods) during SSL_library_init() which doesn't have a corresponding free causes a memory leak. I can see that around where this is allocated in load_builtin_compressions(), memory checking is turne

Re: Am I barking up the wrong tree?

2005-07-14 Thread David Templar
An addition: The phone surely cannot have the private keys (of all the major certificate companies) so, it has to be something to do with the format of the cert. For those who read my earlier posts, I have added the first 2 bytes of certs on the phone (signalling whether it is a v1 or v3 cert

Am I barking up the wrong tree?

2005-07-14 Thread David Templar
Ignore my last post - I forgot the extra 0s are the hhdd etc... But I am having a problem - I have deleted all files on my phone, but I cannot get it to accept my certificates. If I add just one of the old certificates and then mine, it will be "recognized" - but only as part of the old one (

Re: Can openssl change a V1 to a V3 x509?

2005-07-14 Thread David Templar
Thanks! David Schwartz wrote: I am having a lot of problems importing a certificate made in openssl into a phone, but I can get a keytool certificate imported. The only thing is that I need to change the V1 cert (keytool only makes V1) to a V3 cert - can openssl modify a cert to a V3 (without c

How to change utc time?

2005-07-14 Thread David Templar
This is a follow on from my last post as the text lost its formatting. How do I change the utc time of a certificate to a smaller format (whilst creating a cert): 18082107Z - there are lots of zeros in this format, openssl gives less. Also, how do I add a friendly name object - I have trie

Generatiing a cert with these objects - help! .cnf and utctime...

2005-07-14 Thread David Templar
Hi, I am still stuck on the phone cert creation, but I am inching closer! How do I generate a cert with only the below data to be included in the certs? What should be openssl.cnf have? What should be my genrsa be? and do I need to do anything else? I have attached the asn1parse output of the

RE: Can openssl change a V1 to a V3 x509?

2005-07-14 Thread David Schwartz
> I am having a lot of problems importing a certificate made in openssl > into a phone, but I can get a keytool certificate imported. The only > thing is that I need to change the V1 cert (keytool only makes V1) to a > V3 cert - can openssl modify a cert to a V3 (without changing anything > else)?

[openssl.org #1160] openssl 0.9.8 build problem on Linux/dietlibc

2005-07-14 Thread [EMAIL PROTECTED] via RT
For some reason, openssl suddenly wants to add -ldl when linking the test programs. That is uncalled for, I specifically added no-dso to the Configure options. Please reverse this. Felix __ OpenSSL Project

[openssl.org #1159] ./config shared no-deprecated

2005-07-14 Thread Michael Bell via RT
__ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager [EMAIL PROTECTED]

[openssl.org #1158] missing options in ca.pod and req.pod

2005-07-14 Thread Michael Bell via RT
__ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager [EMAIL PROTECTED]