Future Releases

Hi, everyone. Is there an expected date for the release of 1.0.1d? For 1.0.2? 1.1.0? Thanks, Paul _ Paul A. Suhler, PhD | Firmware Engineer | Quantum Corporation | Office: 949.856.7748 | paul.s

[openssl.org #2844] TLS 1.2 server sends abort when TLS 1.2 client doesn't include Signature Algorithm extension

> [fol...@cisco.com - Fri Jul 06 17:50:15 2012]: > > RFC 5246 allows a TLS 1.2 client to omit the Signature Algorithm > extension. See section 7.4.1.4.1 for details. This creates a problem > for OpenSSL 1.0.1 when acting as a server and either a DSA or ECDSA > certificate is used. Because th

[openssl.org #2844] TLS 1.2 server sends abort when TLS 1.2 client doesn't include Signature Algorithm extension

RFC 5246 allows a TLS 1.2 client to omit the Signature Algorithm extension. See section 7.4.1.4.1 for details. This creates a problem for OpenSSL 1.0.1 when acting as a server and either a DSA or ECDSA certificate is used. Because the ClientHello does not contain the Signature Algorithm exte

[openssl.org #2843] [PATCH] trivial: drop another spurious end-of-comment

This time in tls1.h drop_spurious_end_of_comment_2.patch Description: Binary data

[openssl.org #2842] [PATCH] trivial: drop spurious end-of-comment token

This patch helps (admittedly crude) parsing tools to avoid confusion. drop_spurious_end_of_comment.patch Description: Binary data

[openssl.org #2841] Unreachable return in OpenSSL 1.0.1c, x509_vfy::check_issued()

Recommend deleting the last return in the function. static int check_issued(X509_STORE_CTX *ctx, X509 *x, X509 *issuer) { ... ctx->current_issuer = issuer; return ctx->verify_cb(0, ctx); return 0; } __

RE: [PATCH] Support DTLS compatibility with DTLS1_BAD_VER client

Any feedback on this patch ? Thanks, Ghennadi

[PATCH]: armcap.c, do not execute neon/cortex tests on Linux

Hello, I've been getting "undefined instruction" errors in my syslog caused by the cpu features detection code in armcap.c. These messages show up when CONFIG_DEBUG_USER is enabled in the kernel. To eliminate the errors I have updated the cpu detection code to use /proc/self/auxv and /proc/