[openssl.org #3128] bug report: segfault after error 1408F10B

2013-09-15 Thread dmy...@frankopak.com via RT
Hello! I use Squid www.squid-cache.org many years in accelerator mode, but last weeks it was start crash(every day - sigcrash 6, restart) after SSL error 1408F10B. I have tried different versions Squid, OpenSSL, Linux distrib(Squid 3.3.8, 3.1.23; OpenSSL 1.0.1e, 1.0.1c; OpenSuSe 12.3(i586)

Re: [openssl.org #3126] [PATCH 1.0.1e] armcap.c: use getauxv on glibc to find caps

2013-09-15 Thread Andy Polyakov via RT
More reliable than playing games with signal handling in libraries. While signal-free initialization of OPENSSL_armcap_P is indeed desirable, suggested code doesn't actually solve all the problems. Yes, it would reliably detect NEON capability. But the thing about tick counter is that it's

Re: [openssl.org #3117] [PATCH] A fast vectorized implementation of binary elliptic curves on x86-64 processors

2013-09-15 Thread Andy Polyakov via RT
Hi, This patch is a contribution to OpenSSL. It offers an efficient and constant-time implementation of the elliptic curve point multiplication, for the following standard NIST/SECG binary elliptic curves: sect163k1, sect163r1, sect163r2, sect193r1, sect193r2, sect233k1, sect233r1,

Re: [PATCH] Create target for ppc64le

2013-09-15 Thread Andy Polyakov
Now that powerpc is annouced to have Little endian support create a target for openssl that uses the correct Endian define and disables the big endian specific asm routines. Signed-off-by: Tony Breeds t...@bakeyournoodle.com --- openssl-1.0.1e.orig/Configure 2013-02-12 02:26:04.0

Re: [openssl.org #3110] Adding support for x86_64 Cygwin

2013-09-15 Thread Andy Polyakov via RT
Hi, the below patch adds support for the new 64 bit version of Cygwin, running on x86_64. Only a few minor Configure and Makefile patches are required to get it run. The patch is against git from today. I hope it's ok to apply this to the upstream sources. Could you double-check

Re: [openssl.org #3125] [PATCH 1.0.1e] openssl/crypto/armcap.c: fix a typo in OPENSSL_rdtsc

2013-09-15 Thread Andy Polyakov via RT
a | 1 is always true, regardless of OPENSSL_armcap_P, and mrc cp15 will fail on = v6. --- a/crypto/armcap.c +++ b/crypto/armcap.c @@ -23,7 +23,7 @@ unsigned int _armv7_tick(void); unsigned int OPENSSL_rdtsc(void) { - if (OPENSSL_armcap_P|ARMV7_TICK) + if

Strange behaviour of pkcs7_decrypt_info

2013-09-15 Thread Dmitry Belyavsky
Greetings! I found a peace of code I can not understand in crypto/pkcs7/pk7_doit.c. We always return 0 from pkcs7_decrypt_rinfo (line 238). But one level higher (line 563) we see the following: /* Only exit on fatal errors, not decrypt failure */ if (pkcs7_decrypt_rinfo(ek,

Re: Strange behaviour of pkcs7_decrypt_info

2013-09-15 Thread Dr. Stephen Henson
On Mon, Sep 16, 2013, Dmitry Belyavsky wrote: Greetings! I found a peace of code I can not understand in crypto/pkcs7/pk7_doit.c. We always return 0 from pkcs7_decrypt_rinfo (line 238). But one level higher (line 563) we see the following: /* Only exit on fatal errors, not