Re: Patch for Correct fix for CVE-2013-0169 for openssl-.0.9.8y

2013-09-29 Thread mancha
Costas Stasimos coststasimos at gmail.com writes: Is there already prepared patch for 0.9.8y for this issue? If yes where I could download it? Hi. there's a fix already committed in the git tree which means it'll be included in the next 0.9.8 release. You can grab it here:

Re: Documentation issue?

2013-09-29 Thread Steve Marquess
On 09/27/2013 09:38 PM, karanpopali wrote: In the FIPS User Guide (http://www.openssl.org/docs/fips/UserGuide-2.0.pdf), there is example to set the default DRBG type. It uses DRBG type as NID_hmac_WithSHA256, but it should be NID_hmacWithSHA256. Example from UserGuide: ./config