Make targets

2008-11-10 Thread Philip Prindeville
Some quick questions... It's not clear what do_linux-shared builds exactly... what does it build? What is the command to install just apps? Install just static libs? Install just shared libs? Install just headers? Also, does openssl-dev have an IRC channel people hang out on? Thanks,

Re: ECDSA

2008-11-10 Thread Peter Waltenberg
Key generation just uses the lower level EC routines.i.e. EC_KEY_generate_key() EC(DH/DSA) isn't quite the same as DH/DSA. Sorry , I can't help with leaving bits out - there's quite a bit you do need. Peter

[PATCH] overriden - overridden

2008-11-10 Thread Tobias Stoeckmann
Hi, just spotted that sometimes the typo overriden occurs, which will be fixed by this diff. Tobias Stoeckmann --- crypto/dso/README~ Sun Nov 9 13:45:20 2008 +++ crypto/dso/README Sun Nov 9 13:45:26 2008 @@ -12,7 +12,7 @@ (a) be turned off altogether through the use of the

typo in documentation

2008-11-10 Thread balthasar . nuk
Just a small typo: --- doc/crypto/ripemd.pod~ 2006-10-27 21:59:48.0 + +++ doc/crypto/ripemd.pod 2008-11-08 23:13:22.0 + @@ -13,7 +13,7 @@ unsigned char *md); int RIPEMD160_Init(RIPEMD160_CTX *c); - int RIPEMD160_Update(RIPEMD_CTX *c, const

Issues updating distro containing openssl-0.9.8

2008-11-10 Thread Philip Prindeville
Howdy, I'm trying to troubleshoot a recent version-bump we did of openssl-0.9.7 to 0.9.8i, but unfortunately it's just dying silently. make[2]: Entering directory `/home/philipp/kernel/build_i586/openssl-0.9.8i/crypto' make[2]: warning: jobserver unavailable: using -j1. Add `+' to parent

Re: More fixes for 0.9.8i

2008-11-10 Thread Kyle Hamilton
Please submit your patch to [EMAIL PROTECTED] so it can be tracked in the issue tracker? -Kyle H On Sun, Nov 9, 2008 at 2:37 PM, Philip Prindeville [EMAIL PROTECTED] wrote: This fixes the lack of tracing in Makefiles... Replacing @ with $(Q) in all places except before '@echo' rule commands.

[openssl.org #1779] Build failure if configured with -DKSSL_DEBUG

2008-11-10 Thread Steven J. Murdoch via RT
OpenSSL 0.9.8i and 0.9.8-stable-SNAPSHOT-20081108 fail to build if KSSL_DEBUG is defined. I enabled this because it gives useful information to help me debug an application issue (as suggested in ssl/kssl.h). Error message (in openssl-0.9.8-stable-SNAP-20081108): t1_enc.c: In function

SSL_read crashing

2008-11-10 Thread bikcupid
Hi, I'm in need of an urgent help :o( ... I'm trying to setup dtls connection (with openssl-0.9.8g). I am using non-blocking socket and managed to complete handshake between client-server. However whenever I try to read (I'm using libevent to handle asynchronous events) using SSL_read it crashes.

[openssl.org #1743]

2008-11-10 Thread John Wilkinson via RT
Can anyone confirm that this is an acceptible fix for this crasher? __ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List

Bug in Configure script?

2008-11-10 Thread Philip Prindeville
I'm looking at ./Configure where it does: chop $prefix if $prefix =~ /\/$/; and then later on: s/^INSTALLTOP=.*$/INSTALLTOP=$prefix/; And then in crypto/Makefile, we have: install: @[ -n $(INSTALLTOP) ] # should be set by top Makefile... which means that if you invoke Configure

[openssl.org #1765] 0.9.8i make failed on UBuntu Linux Sun XVM (host operating sys is Windows XP)

2008-11-10 Thread Stephen Henson via RT
[EMAIL PROTECTED] - Wed Oct 22 17:10:41 2008]: cryptlib.h:62:20: error: stdlib.h: No such file or directory cryptlib.h:63:20: error: string.h: No such file or directory In file included from cryptlib.h:65, from cryptlib.c:117: .../e_os.h:412:30: error: unistd.h: No such

[openssl.org #1778] default maximum chain length considered too low

2008-11-10 Thread Stephen Henson via RT
[EMAIL PROTECTED] - Thu Nov 06 09:19:52 2008]: Why not increase the default, say, to 100 instead, as Globus did? What did they actually change? Changing the line: 9, /* depth */ in x509_vpm.c should do the trick. Can you confirm this works?

Re: [openssl.org #1778] default maximum chain length considered too low

2008-11-10 Thread Maarten Litmaath via RT
Hi Stephen, [EMAIL PROTECTED] - Thu Nov 06 09:19:52 2008]: Why not increase the default, say, to 100 instead, as Globus did? What did they actually change? Changing the line: 9, /* depth */ in x509_vpm.c should do the trick. Can you confirm this

Re: [openssl.org #1778] default maximum chain length considered too low

2008-11-10 Thread Maarten.Litmaath
Hi Stephen, [EMAIL PROTECTED] - Thu Nov 06 09:19:52 2008]: Why not increase the default, say, to 100 instead, as Globus did? What did they actually change? Changing the line: 9, /* depth */ in x509_vpm.c should do the trick. Can you confirm this

Cell support?

2008-11-10 Thread Jeff Curley
Are there any plans to get OpenSSL building on the PS3? I've considered trying to hand edit the makefiles, and figured I'd send an email out first. __ OpenSSL Project http://www.openssl.org

Need help....Building libcrypto.a (FIPS) into a shared library on Windows.

2008-11-10 Thread Justin A
I am getting this error on windows. 2564:error:2D06906E:FIPS routines:FIPS_CHECK_INCORE_FINGERPRINT:fingerprint does  not match:.\fips\fips.c:238: I am using the fiplink.pl and it is also  generating the signature for the shared library using fips_premain_dso , followed by inserting the

Re: Cell support?

2008-11-10 Thread Brad House
Are there any plans to get OpenSSL building on the PS3? I've considered trying to hand edit the makefiles, and figured I'd send an email out first. Can I ask what is _not_ working? There are quite a few linux distros which support PS3 and they all include OpenSSL already, so it is known to

Issues with verify and public key decrypt

2008-11-10 Thread Sivaramakrishnan Ananthakrishnan
Hi, We are facing some issue with openssl libraries to extract the N and E parameter from the public key in the PEM format. Our aim is to verify the digital signature in terms of first decrypt the digital signature using public key and then locally generate a hash digest and compare

Re: [PATCH] keep CHIL engine from breaking in non-threaded situations [openssl.org #1736]

2008-11-10 Thread Sander Temme
On Nov 2, 2008, at 9:19 AM, Sander Temme wrote: The following compiles and tests cleanly on trunk and on the latest snapshot of 0.9.8-stable (with offset 1 in e_chil.c). Also attached to prevent line wrap: Ping? Thanks, S. Index: engines/e_chil.c