Re: Issue with dtls1_clear changes from issue #2506

2011-09-19 Thread Michael Tuexen
On Sep 16, 2011, at 12:51 PM, Paul Witty wrote: On 15/09/11 18:12, Michael Tuexen wrote: Hi Paul, I think this is what Robin found. Could you give the patch provided by Robin in http://rt.openssl.org/Ticket/Display.html?id=2602 a try? It should fix your issue. It does indeed; the code

[openssl.org #2604] bug report : openssl 0.9.8r

2011-09-19 Thread Damon Chitsaz via RT
Hi, We found a bug in openssl 0.9.8r, which is existent in previous version of openssl. In the source code (specifically in s_clients.c and s_server.c), 'port' variable is defined as type 'short' where it should be defined as 'unsigned short'. Please see below for diff/patch. Also, in multiple

[openssl.org #2605] Directly Create Public Key File from Cert - PATCH

2011-09-19 Thread Nick Lewis via RT
Please find below a patch that permits a public key file to be produced directly from a certificate without piping from stdout. The patch also mops up a couple of bugs in which 'out' is not defined when needed Nick --- diff --git a/apps/x509.c b/apps/x509.c

[openssl.org #2606] Bug in crypto/x509/x509_vfy.c:X509_cmp_time() ?

2011-09-19 Thread Christoph Viethen via RT
Hello, seems I have found a little bug in X509_cmp_time(). According to X.680 (section 43.3, 07/2002 issue), the following UTCTime representations refer to the same point in time: 8201021200Z 8201020700-0500 (namely, 12 noon UTC on 2nd January 1982) That very same point in time is

Re: [openssl.org #2596] report possible bug in 1.0.0e install.

2011-09-19 Thread Ladar Levison
On Mon, 09/19/2011 11:32 AM, Zaccone, Warren wrote: deleting lines 828, 829, and 830 caused the config to complete successfully for 1.0.0e. Results below. However the make fails. I have copied the make results below. I will poke around a bit to determine why. I am sending this on, in

EVP_Cipher()

2011-09-19 Thread Paul Suhler
Hi, everyone. Should EVP_Cipher() be used? I've found an inconsistency in its return values: For the cipher EVP_aes_256_gcm, successful decryption returns the length of the input. (That's what aes_gcm_cipher() returns.) For other ciphers, like EVP_aes_256_cbc, EVP_Cipher() returns 1 for

s_client successful on port 443 but fails on port 5989

2011-09-19 Thread UserLP
Hi, From a windows machine s_client is successful on port 443 but fails on port 5989 with 400 Bad Request and read:errno=0 The same works from another machine for the same target. The target machine is an ESXi. Request help to better understand the error. -- View this message in context:

Re: s_client successful on port 443 but fails on port 5989

2011-09-19 Thread Ladar Levison
On Mon, 09/19/2011 11:26 PM, UserLP wrote: Hi, From a windows machine s_client is successful on port 443 but fails on port 5989 with 400 Bad Request and read:errno=0 The same works from another machine for the same target. The target machine is an ESXi. Request help to better understand the