Re: Issue with dtls1_clear changes from issue #2506

2011-09-16 Thread Michael Tuexen
On Sep 15, 2011, at 6:57 PM, Paul Witty wrote: The code which reproduces the crash (not necessarily minimal): SSL_CTX * dtls_context = SSL_CTX_new(DTLSv1_method()); SSL_CTX_set_read_ahead(dtls_context, 1); SSL_CTX_set_cipher_list(dtls_context, DEFAULT:!LOW:!EXP:!MD5);

[openssl.org #2603] 1.0.0e overwrites /dev/null

2011-09-16 Thread Jim Payne via RT
I wish I could give you the info you ask for in your Readme but I can not even install this which is not what I am reporting. SunOS 5.9 Generic_122300-60 sun4u sparc SUNW,Sun-Fire-V240 OpenSSL version 1.0.0e which does not install but produces a problem when I try to config it The /config

Re: Issue with dtls1_clear changes from issue #2506

2011-09-16 Thread Paul Witty
On 15/09/11 18:12, Michael Tuexen wrote: Hi Paul, I think this is what Robin found. Could you give the patch provided by Robin in http://rt.openssl.org/Ticket/Display.html?id=2602 a try? It should fix your issue. It does indeed; the code to reproduce is for informational purposes only, as you

Re: [openssl.org #2603] 1.0.0e overwrites /dev/null

2011-09-16 Thread Andy Polyakov via RT
I wish I could give you the info you ask for in your Readme but I can not even install this which is not what I am reporting. SunOS 5.9 Generic_122300-60 sun4u sparc SUNW,Sun-Fire-V240 OpenSSL version 1.0.0e which does not install but produces a problem when I try to config it The

Bug in crypto/x509/x509_vfy.c:X509_cmp_time() ?

2011-09-16 Thread Christoph Viethen
Hello, might have found a little bug in X509_cmp_time(). According to X.680 (section 43.3, 07/2002 issue), the following UTCTime representations refer to the same point in time: 8201021200Z 8201020700-0500 (namely, 12 noon UTC on 2nd January 1982) That very same point in time is

Re: [openssl.org #2603] 1.0.0e overwrites /dev/null

2011-09-16 Thread Jim Payne via RT
Thanks for your quick reply… Yea…I know I could have run it as non-root but that is what I had done in the past upgrading openssl-and security makes me do it way too freqently…no it is not what I know I should have done (chalk it up to laziness on my part) so I don't have an excuse but did not

Re: Bug in crypto/x509/x509_vfy.c:X509_cmp_time() ?

2011-09-16 Thread Dr. Stephen Henson
On Fri, Sep 16, 2011, Christoph Viethen wrote: Hello, might have found a little bug in X509_cmp_time(). According to X.680 (section 43.3, 07/2002 issue), the following UTCTime representations refer to the same point in time: 8201021200Z 8201020700-0500 (namely, 12 noon

Re: Bug in crypto/x509/x509_vfy.c:X509_cmp_time() ?

2011-09-16 Thread Christoph Viethen
Hello, On Sep 16, 2011, at 4:50 PM, Dr. Stephen Henson wrote: On Fri, Sep 16, 2011, Christoph Viethen wrote: Hello, might have found a little bug in X509_cmp_time(). Well bug reports should go to the request tracker (r...@openssl.org) so they don't get mislaid. Oh, all right. Many