OpenSSL 1.0.1b released

2012-04-26 Thread OpenSSL
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 1.0.1b released === OpenSSL - The Open Source toolkit for SSL/TLS http://www.openssl.org/ The OpenSSL project team is pleased to announce the release of version 1.0.1b of our open source

hi

2012-04-26 Thread Tom Xian
you should check this thing out http://www.ca15news.net/biz/?page=7810342 ~*Advertisement __ OpenSSL Project http://www.openssl.org Development Mailing List

dtls alert with MAC value

2012-04-26 Thread Manish Yadav
Hi, i see in dtls alert protocol, alert could be sent with MAC (optional)/ for authentication. could you please let me know the ssl api/mechanism to do the same? thanks, manish

OpenSSL 1.0.1b test cases to exercise real scenarios

2012-04-26 Thread Adriano Godinho
Hi all, We are including the latest version of OpenSSL with FIPS support in our product and to ensure that it doesn't break anything we are performing a bunch of tests. I already executed the tests cases that are bundled with OpenSSL but, as described on OpenSSL documentation, it doesn't exercise

[openssl.org #2803] bug report: OCSP_basic_verify may return incorrect value

2012-04-26 Thread jean-etienne.schwa...@bull.net via RT
Hello, openssl 0.9.8a until 1.0.1b OCPS_basic_verify return a positive value when X509_STORE_CTX_init failed, and, in this case, we can trust an unverified OCSP response. The following path correct this. Thanks for all the good job Jean-Etienne Schwartz Hello, openssl 0.9.8a until 1.0.1b

Re: [openssl.org #2749] SSL_shutdown() doesn't need to ever return 0

2012-04-26 Thread Darryl Miles
John Gardiner Myers via RT wrote: However my point of view is: Actually there is. It is important for OpenSSL to convey back to the application when it has successfully carried out all the following tasks: * to encode SSL control packet (with the way OpenSSL is imlemented this actually

Disabling TLS1.2 and TLS1.1

2012-04-26 Thread Adriano Godinho
Hi, Is there some way to disable TLS1.2 and TLS1.1 at build time in OpenSSL 1.0.1b? Thanks, -- Adriano Godinho