[openssl.org #1780] OSCP_REQUEST name collision between ossl_typ.h and Wincrypt.h using Windows Platform SDK 6.0a in openssl-0.9.8h and openssl-0.9.8i

2008-11-11 Thread Bill Segall via RT
The solution would seem to be to change the name of OSCP_REQUEST to OSSL_OSCP_REQUEST. Similarly for OSCP_RESPONSE. A workaround is to #include Wincrypt.h and then #undef OSCP_REQUEST/RESPONSE before including openssl.h. It's possible to install the Windows Platform SDK 6.0a for Visual Studio

[openssl.org #1782] Re: Bug in Configure script?

2008-11-11 Thread Philip Prindeville via RT
Attached is a fix. One liner. Philip Prindeville wrote: I'm looking at ./Configure where it does: chop $prefix if $prefix =~ /\/$/; and then later on: s/^INSTALLTOP=.*$/INSTALLTOP=$prefix/; And then in crypto/Makefile, we have: install: @[ -n $(INSTALLTOP) ] # should be

[PATCH] DTLS application data in handshake

2008-11-11 Thread Robin Seggelmann
The current DTLS implementation always generates an SSL_R_UNEXPECTED_RECORD error if application data is received while handshaking. This is ok for the first handshake, but not necessary for renegotiations. Furthermore it's likely that the connection fails just because of unordered UDP

[openssl.org #1574] Session Ticket in OpenSSL 0.9.9 and EAP-FAST

2008-11-11 Thread Stephen Henson via RT
[EMAIL PROTECTED] - Wed Oct 22 13:56:16 2008]: On Wed, Oct 22, 2008 at 01:19:53PM +0200, Stephen Henson via RT wrote: I've had an initial look at this patch. Is there some reason you need to be able to generate generic extensions rather than just being able to override the session

[openssl.org #1783] TLS extensions patch for EAP-FAST support

2008-11-11 Thread Mike McCauley via RT
Attached is a patch file for openssl-0.9.8i that adds support for some features required in order to suport EAP-FAST. The patch is from Jouni Malinen and is required for EAP-FAST support in wpa_supplicant and hostapd. Also required by a number of other open-source and commercial projects. The

Re: [openssl.org #1725] OpenSSL-0.9.8h: Bug in Certificate Request generation

2008-11-11 Thread Giang Nguyen
i'd say upgrade to 0.9.8i. if not possible, you can try the attached patch. use at your own risk :) diff -Naur openssl-0.9.8h-old/crypto/x509/x509_att.c openssl-0.9.8h-new/crypto/x509/x509_att.c --- openssl-0.9.8h-old/crypto/x509/x509_att.c 2008-04-02 04:11:51.0 -0700 +++