Re: FIPS Module 1.2 build with Visual Studio 2010 fails self-tests

2012-04-15 Thread Vimol Kshetrimayum
Andy Polyakov appro at openssl.org writes: I tested this on the x86 version of the DLL and I imagine it will fix the x64 DLL as well (they both reported the same error). It looks like this setting will need to be added for VS2010. As mentioned [in another reply], I was under

Re: [openssl.org #2789] SHA-256 bug - Big endian arch

2012-04-15 Thread Pavel Stanek via RT
HI,   You are right, the optimalisations are the issue. When I compile it with O0 then it's OK.   I also found that problem occurs in macros Siga0,1 Maj, ... Wth O0 there are correct valus but with O2 there are incorrect values.   Compiler must have some problem there. ( I also test to modify

Re: Compile error with MinGW-w64

2012-04-15 Thread Jonathan Liu
On 14/04/2012 12:50 AM, Andy Polyakov wrote: What happens if you add wait; at the very end of crypto/asm/sha1-x86_64.pl? It just hangs. Regards, Jonathan __ OpenSSL Project

Re: FIPS Module 1.2 build with Visual Studio 2010 fails self-tests

2012-04-15 Thread Vimol Kshetrimayum
Andy Polyakov appro at openssl.org writes: I tested this on the x86 version of the DLL and I imagine it will fix the x64 DLL as well (they both reported the same error). It looks like this setting will need to be added for VS2010. As mentioned [in another reply], I was under

[openssl.org #2791] [PATCH] fix -DOPENSSL_NO_SOCK on sunos

2012-04-15 Thread Ben Noordhuis via RT
Hi, This patch compiles out BIO_socket_nbio() and the body of BIO_new_ssl_connect() if OPENSSL_NO_SOCK is set. * BIO_socket_nbio() looks like its author forgot to put it in the #ifndef block. * BIO_new_ssl_connect() calls BIO_s_connect() which is compiled out by OPENSSL_NO_SOCK. It makes the

Re: FIPS Module 1.2 build with Visual Studio 2010 fails self-tests

2012-04-15 Thread Dr. Stephen Henson
On Sun, Apr 15, 2012, Vimol Kshetrimayum wrote: Andy Polyakov appro at openssl.org writes: I tested this on the x86 version of the DLL and I imagine it will fix the x64 DLL as well (they both reported the same error). It looks like this setting will need to be added for VS2010.

Re: [openssl.org #2778] [BUG:] OpenSSL 1.0.1 x86_64: d1_pkt.c(444): OpenSSL internal error, assertion failed: t = 0

2012-04-15 Thread Andy Polyakov via RT
http://cvs.openssl.org/chngview?cn=22334 is interim solution, proper solution will be provided at later point (if found appropriate). Thanks, this circumvents the DTLS issue. The TLS empty fragments issue remains, http://cvs.openssl.org/chngview?cn=22390

Re: [openssl.org #2635] 1/n-1 record splitting technique for CVE-2011-3389

2012-04-15 Thread Andy Polyakov via RT
Here is an experimental patch I wrote that implements the 1/n-1 record splitting technique for OpenSSL. I am sending it here for consideration by OpenSSL upstream developers. By default the 0/n split is used but in case the SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS flag is set, we split the first

Re: Compile error with MinGW-w64

2012-04-15 Thread Andy Polyakov
What happens if you add wait; at the very end of crypto/asm/sha1-x86_64.pl? It just hangs. 'which perl'? If not /bin/perl, i.e. non-MSYS perl, then I'd suggest to complement MSYS installation with MSYS perl. __ OpenSSL

Re: [openssl.org #2781]

2012-04-15 Thread Andy Polyakov via RT
Leandro Santiago via RT wrote: I also tested with mingw64:gcc and mingw:gcc. The results were the same in the three machines. And I'm using a no-patched openssl downloaded from openssl.org. Where :gcc come from? As Roumen mentioned, it's mingw [or mingw64], not mingw:gcc, mingw32:gcc, nor