[openssl.org #2669] make test failure

2012-01-03 Thread Stephen Henson via RT
[bhaskarv...@gmail.com - Tue Jan 03 12:47:57 2012]: Sir, am getting test failed when i tried to install openssl package in my system for redhat RHEL5.4. I choosed #./configure zlib-dynamic shared then build was successful. #make but error is in testing the build. #make test zlib

OpenSSL 1.0.1 beta 1 released

2012-01-03 Thread OpenSSL
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 1.0.1 Beta 1 OpenSSL - The Open Source toolkit for SSL/TLS http://www.openssl.org/ OpenSSL is currently in a release cycle. The first beta is now released. The beta release is available for

[BUG] OpenSSL 1.0.1 beta 1 released (on VMS FAILED)

2012-01-03 Thread Arpadffy Zoltan
Hello, I have tested the OpenSSL 1.0.1 beta 1 release on OpenVMS Alpha and IA64 and the build fails with the following error: Compiling The mem_dbg.c File. (LIBRARY,LIB) #include stdint.h .^ %CC-F-NOINCLFILEF, Cannot find file stdint.h specified in #include directive. at line number 72 in

crypto/objects/obj_xref.h

2012-01-03 Thread Tim Rice
I was testing OpenSSL_1_0_1-stable today and got this . making all in crypto/objects... /usr/bin/perl objxref.pl obj_mac.num obj_xref.txt obj_xref.h UX:sh (sh): ERROR: obj_xref.h: Cannot create . It looks like there is a autogenerated file in CVS. Those of us that build from a

Re: crypto/objects/obj_xref.h

2012-01-03 Thread Dr. Stephen Henson
On Tue, Jan 03, 2012, Tim Rice wrote: I was testing OpenSSL_1_0_1-stable today and got this . making all in crypto/objects... /usr/bin/perl objxref.pl obj_mac.num obj_xref.txt obj_xref.h UX:sh (sh): ERROR: obj_xref.h: Cannot create . It looks like there is a

Re: crypto/objects/obj_xref.h

2012-01-03 Thread Tim Rice
On Tue, 3 Jan 2012, Dr. Stephen Henson wrote: On Tue, Jan 03, 2012, Tim Rice wrote: I was testing OpenSSL_1_0_1-stable today and got this . making all in crypto/objects... /usr/bin/perl objxref.pl obj_mac.num obj_xref.txt obj_xref.h UX:sh (sh): ERROR: obj_xref.h:

OpenSSL FIPS Module 2.0 status update

2012-01-03 Thread Steve Marquess
The FIPS 140-2 validation effort for the OpenSSL FIPS Object Module 2.0 has reached an important milestone; we are now in the final phase of this effort. The formal submission prepared by the test lab has been sent to the CMVP. At this point we can only wait for their review and action. Our

Thunderbird Issue

2012-01-03 Thread The Doctor
Finally got Openssl 1.0.1 daily working However, Mozilla Thunderbird is choking saying SSL received a malformed Server Hello handshake message. (Error code: ssl_error_rx_malformed_server_hello) No such problem in Outlook Express. -- Member - Liberal International This is

1.0.0 / 1.0.1 binary compatability

2012-01-03 Thread Tim Rice
I notice the shared library names (and SONAME) are 1.0.0 on the OpenSSL 1.0.1 libraries. I'd just like verification that this is intentional and we can expect binaries built against the 1.0.0 shared libs to run fine using the 1.0.1 shared libs. Thanks. -- Tim Rice

Re: 1.0.0 / 1.0.1 binary compatability

2012-01-03 Thread Thor Lancelot Simon
On Tue, Jan 03, 2012 at 11:23:34AM -0800, Tim Rice wrote: I notice the shared library names (and SONAME) are 1.0.0 on the OpenSSL 1.0.1 libraries. 1.0.0? That seems wrong. The shared library major number should probably stay the same, but the minor number increase - unless the intention is

Re: Thunderbird Issue

2012-01-03 Thread Dr. Stephen Henson
On Tue, Jan 03, 2012, The Doctor wrote: Finally got Openssl 1.0.1 daily working However, Mozilla Thunderbird is choking saying SSL received a malformed Server Hello handshake message. (Error code: ssl_error_rx_malformed_server_hello) No such problem in Outlook Express. I can

Re: 1.0.0 / 1.0.1 binary compatability

2012-01-03 Thread Allan Clark
On 2012-01-03, at 11:59, Thor Lancelot Simon wrote: On Tue, Jan 03, 2012 at 11:23:34AM -0800, Tim Rice wrote: I notice the shared library names (and SONAME) are 1.0.0 on the OpenSSL 1.0.1 libraries. 1.0.0? That seems wrong. The shared library major number should probably stay the same,

Re: 1.0.0 / 1.0.1 binary compatability

2012-01-03 Thread Tim Rice
On Tue, 3 Jan 2012, Allan Clark wrote: Logically, depending on where the API is stable/constant, the SONAME maybe should be 1.0, with soft links from the libXX.so.1.0 - libXX.so.1.0.1 .. I'm referring to the old design where the filename/SONAME/softlink was used/intended to allow some

Re: Thunderbird Issue

2012-01-03 Thread Dr. Stephen Henson
On Tue, Jan 03, 2012, Dr. Stephen Henson wrote: On Tue, Jan 03, 2012, The Doctor wrote: Finally got Openssl 1.0.1 daily working However, Mozilla Thunderbird is choking saying SSL received a malformed Server Hello handshake message. (Error code:

BUG: openssl-1.0.1-beta1 bug - TLS 1.2 connection failure

2012-01-03 Thread Jean Cyr
s_client and s_server fail to establish connection with TLS 1.2. Valid self-signed CA certificate, and valid client and server certificates are used (attached). With unpatched openssl-1.0.1-beta1 the following is observed (failure case): Server: openssl s_server -Verify 3 -cert server.pem

Re: BUG: openssl-1.0.1-beta1 bug - TLS 1.2 connection failure

2012-01-03 Thread Dr. Stephen Henson
On Tue, Jan 03, 2012, Jean Cyr wrote: s_client and s_server fail to establish connection with TLS 1.2. Valid self-signed CA certificate, and valid client and server certificates are used (attached). With unpatched openssl-1.0.1-beta1 the following is observed (failure case):

Re: Thunderbird Issue

2012-01-03 Thread The Doctor
On Tue, Jan 03, 2012 at 09:36:24PM +0100, Dr. Stephen Henson wrote: On Tue, Jan 03, 2012, The Doctor wrote: Finally got Openssl 1.0.1 daily working However, Mozilla Thunderbird is choking saying SSL received a malformed Server Hello handshake message. (Error code:

Re: Thunderbird Issue

2012-01-03 Thread The Doctor
On Tue, Jan 03, 2012 at 06:08:54PM -0700, The Doctor wrote: On Tue, Jan 03, 2012 at 09:36:24PM +0100, Dr. Stephen Henson wrote: On Tue, Jan 03, 2012, The Doctor wrote: Finally got Openssl 1.0.1 daily working However, Mozilla Thunderbird is choking saying SSL received

_POSIX_C_SOURCE

2012-01-03 Thread Tim Rice
Some things came up attempting to build on OpenServer 5 . gcc -I.. -I../.. -I../modes -I../asn1 -I../evp -I../../include -fPIC -DOPENSSL_PIC -DZLIB_SHARED -DZLIB -DDSO_DLFCN -DHAVE_DLFCN_H -O3 -fomit-frame-pointer -DOPENSSL_BN_ASM_PART_WORDS -DOPENSSL_BN_ASM_MONT

RE: BUG: openssl-1.0.1-beta1 bug - TLS 1.2 connection failure

2012-01-03 Thread Jean Cyr
Yes, 516 instead of 514 does the trick. -Original Message- From: owner-openssl-...@openssl.org [mailto:owner-openssl-...@openssl.org] On Behalf Of Dr. Stephen Henson Sent: Tuesday, January 03, 2012 7:51 PM To: openssl-dev@openssl.org Subject: Re: BUG: openssl-1.0.1-beta1 bug - TLS 1.2

Re: _POSIX_C_SOURCE

2012-01-03 Thread Rainer Jung
On 04.01.2012 03:16, Tim Rice wrote: Some things came up attempting to build on OpenServer 5 . gcc -I.. -I../.. -I../modes -I../asn1 -I../evp -I../../include -fPIC -DOPENSSL_PIC -DZLIB_SHARED -DZLIB -DDSO_DLFCN -DHAVE_DLFCN_H -O3 -fomit-frame-pointer -DOPENSSL_BN_ASM_PART_WORDS

Re: [openssl.org #2669] make test failure

2012-01-03 Thread bhaskar v via RT
yes i have installed zlib in my system. On 1/3/12, Stephen Henson via RT r...@openssl.org wrote: [bhaskarv...@gmail.com - Tue Jan 03 12:47:57 2012]: Sir, am getting test failed when i tried to install openssl package in my system for redhat RHEL5.4. I choosed #./configure zlib-dynamic

Re: Thunderbird Issue

2012-01-03 Thread The Doctor
On Tue, Jan 03, 2012 at 11:16:36PM +0100, Dr. Stephen Henson wrote: On Tue, Jan 03, 2012, Dr. Stephen Henson wrote: On Tue, Jan 03, 2012, The Doctor wrote: Finally got Openssl 1.0.1 daily working However, Mozilla Thunderbird is choking saying SSL received a

Re: Thunderbird Issue

2012-01-03 Thread The Doctor
On Tue, Jan 03, 2012 at 10:57:42PM -0700, The Doctor wrote: On Tue, Jan 03, 2012 at 11:16:36PM +0100, Dr. Stephen Henson wrote: On Tue, Jan 03, 2012, Dr. Stephen Henson wrote: On Tue, Jan 03, 2012, The Doctor wrote: Finally got Openssl 1.0.1 daily working However,

OpenSSL 1.0.1 test results

2012-01-03 Thread Tim Rice
Here are a few test results. Built from 03 Jan 2012 OpenSSL_1_0_1-stable CVS - OpenServer 5 Would not build. See other posts for details - UnixWare 7.1.4 w/ MP4 ALL TESTS SUCCESSFUL. OPENSSL_CONF=apps/openssl.cnf util/opensslwrap.sh version -a OpenSSL