RE: [openssl.org #2702] TLS bad_mac_record with IIS 7 and client authentication

2012-02-08 Thread Steve Kapinos (stkapino)
Results using prexit are attached. Openssl v1.0.1 beta 2 compiled on powerppc/linux Vs Win2008 R2 64bit IIS7 set to require client auth Command issued: openssl s_client -connect stk-tms.a51.lab:443 -cert /config/lighttpd/ssl.pem -CAfile /user/http_calist.pem -prexit -state Output attached

[openssl.org #2707] Build failure

2012-02-08 Thread Ajit Sarnaik via RT
Hello, I have been trying to build openssl from the source tar ball that I down loaded from the web site. Noticed a bug in one of the perl scripts. Below is the context diff. Encountering undefined symbols from the file fips/utl/fips_enc.c with respect to functions used in

Buggy RC4 on x86-64 (Mac OS X)

2012-02-08 Thread Thomas Davie
Hi all, I'm having some issues with a hand-built OpenSSL 1.0.0d (patched with the SRP patch available at http://srp.stanford.edu/) on x86-64. I hope that the -dev list is the right place to go to with this issue, it wasn't clear on whether here or the user list was the right place, so feel

[openssl.org #2704] Bug in openssl's SRP ClientHello

2012-02-08 Thread Peter Sylvester via RT
On 02/07/2012 09:25 PM, Trevor Perrin via RT wrote: Hello, I think the srp ClientHello extension is being sent incorrectly in 1.0.1 beta 2. trevor's patch corrects an immediate problem but there were others: - the length fields are not correctly assured to be within 1 an 255 - receiving two

Re: Buggy RC4 on x86-64 (Mac OS X)

2012-02-08 Thread Andy Polyakov
I'm having some issues with a hand-built OpenSSL 1.0.0d (patched with the SRP patch available at http://srp.stanford.edu/) on x86-64. I hope that the -dev list is the right place to go to with this issue, it wasn't clear on whether here or the user list was the right place, so feel free to

[openssl.org #2707] Build failure

2012-02-08 Thread Stephen Henson via RT
[asarn...@paloaltonetworks.com - Wed Feb 08 10:21:27 2012]: Hello, I have been trying to build openssl from the source tar ball that I down loaded from the web site. Noticed a bug in one of the perl scripts. Below is the context diff. Encountering undefined symbols from the file

RE: [openssl.org #2707] Build failure

2012-02-08 Thread Ajit Sarnaik via RT
Hello Steve, Thanks for the quick response. Are the functions auto-generated? We are using 0.9.8 at present and wanted to incorporate DRBG support into it, that is why I was trying to compile some of the DRBG files, when I encountered the problem and was looking for the function body. Can

RE: [openssl.org #2707] Build failure

2012-02-08 Thread Erik Tkal
Hi Ajit, It's not clear whether you need FIPS support or not, but it looks like you are attempting to build a FIPS-capable 1.0.1. When you pass the fips configuration flag that causes fipssyms.h to override the entry point names in order to link with the ones built into fipscanister. Either

RE: [openssl.org #2707] Build failure

2012-02-08 Thread Ajit Sarnaik
Hello Steve, Thanks for the quick response. Are the functions auto-generated? We are using 0.9.8 at present and wanted to incorporate DRBG support into it, that is why I was trying to compile some of the DRBG files, when I encountered the problem and was looking for the function body. Can you

Openssl-1.0.1-beta2 with openssl-fips-2.0 compile errors in windows

2012-02-08 Thread Jacob White
After downloading and unpacking *openssl-1.0.1-beta2.tar.gzhttp://www.openssl.org/source/openssl-1.0.1-beta2.tar.gz * and openssl-fips-2.0rc3.tar.gzhttp://opensslfoundation.com/testing/validation-2.0/source/?C=M;O=AI was able to build the fipscanister.lib and the other fips outputs with no