Re: [openssl.org #2128] PKCS12_PBE_add is a noop but maybe it should add the algorithms?

2010-01-11 Thread Jouni Malinen
On Tue, Dec 15, 2009 at 10:18 AM, Tomas Mraz via RT r...@openssl.org wrote: If you call just SSL_library_init() and PKCS12_PBE_add some pkcs12 files will not be loadable and moreover the openssl will crash due to missing checks for ciphers not found. I've reported the crash in a separate

[openssl.org #2135] [patch] fix few LIBDIR refs in engines/

2010-01-11 Thread Mike Frysinger via RT
openssl-1.0.0-beta4 and the openssl-1.0.0-stable branch are still using /lib/ instead of /$(LIBDIR)/ in a few places. -mike Index: engines/Makefile === RCS file: /usr/local/src/openssl/CVSROOT/openssl/engines/Makefile,v retrieving

Re: [openssl.org #2135] [patch] fix few LIBDIR refs in engines/

2010-01-11 Thread Mike Frysinger via RT
On Sunday 10 January 2010 21:53:03 Mike Frysinger wrote: openssl-1.0.0-beta4 and the openssl-1.0.0-stable branch are still using /lib/ instead of /$(LIBDIR)/ in a few places. there is also a missing ref in the top level Makefile.org -mike Index: Makefile.org

[openssl.org #2136] Add display of old-style (MD5) subject/issuer hash to x509 command

2010-01-11 Thread Willy Weisz via RT
This is an enhancement request that addresses an incompatibility introduced with the new SHA1-based hashing of the subject/issuer name defined in openssl 1.0.0. The necessary patches based on openssl 1.0.0-beta4 are attached. Reason for the request: The change forces sites, that distribute

Re: Get root certificates from System Store of Windows

2010-01-11 Thread NARUSE, Yui
(2010/01/10 23:23), Shahin Khorasani wrote: try this (snip) Thanks, it works. So I request X509_STORE_set_default_paths call this. When this is merge, both Unix user and Windows user can use the system's default root certificates. I should file this to Request Tracker as a bug? (even if this

[PATCH] Change needed for -DPURIFY builds.

2010-01-11 Thread Kevin Regan
Any further thoughts on this patch? I'd love to get these -DPURIFY builds working properly. --Kevin crypto/rand/randfile.c : @@ -102,6 +102,14 @@ if (file == NULL) return(0); +#ifdef PURIFY +/* struct stat has padding and unused fields that may not be + * initialized

Re: [PATCH] Change needed for -DPURIFY builds.

2010-01-11 Thread Dr. Stephen Henson
On Mon, Jan 11, 2010, Kevin Regan wrote: Any further thoughts on this patch? I'd love to get these -DPURIFY builds working properly. Please send the patch to the request tracker. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see:

Re: Get root certificates from System Store of Windows

2010-01-11 Thread Dr. Stephen Henson
On Mon, Jan 11, 2010, NARUSE, Yui wrote: (2010/01/10 23:23), Shahin Khorasani wrote: try this (snip) Thanks, it works. So I request X509_STORE_set_default_paths call this. When this is merge, both Unix user and Windows user can use the system's default root certificates. I

RE: [PATCH] Change needed for -DPURIFY builds.

2010-01-11 Thread Kevin Regan
Hi Dr. Henson, I noticed instructions in the README to send the patch to the openssl-dev mailing list. Where can I find this request tracker? Thanks, Kevin -Original Message- From: owner-openssl-...@openssl.org [mailto:owner-openssl-...@openssl.org] On Behalf Of Dr. Stephen Henson

Re: [PATCH] Change needed for -DPURIFY builds.

2010-01-11 Thread Dr. Stephen Henson
On Mon, Jan 11, 2010, Kevin Regan wrote: Hi Dr. Henson, I noticed instructions in the README to send the patch to the openssl-dev mailing list. Where can I find this request tracker? Sending it to rt-b...@openssl.org will result in it appearing in the request tracker. More details at: