[openssl.org #3369] 1.0.1g / Windows / patch - missing ZLIB define in cms_lcl.h

2014-05-30 Thread Stephen Henson via RT
On Thu May 29 20:13:12 2014, krys...@ica.cz wrote: Hello, I am sending patch that we have applied to the distribution of OpenSSL. Why do you need that patch? What problems do you get without it? Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now

Re: [openssl.org #3369] 1.0.1g / Windows / patch - missing ZLIB define in cms_lcl.h

2014-05-30 Thread Libor Krystek via RT
I added file crypto/cms/cms_lcl.h intovariable $crypto in source file util/mkdef.pl:339. Then I called the following commands: perl util/mkdef.pl crypto update perl Configure enable-md2 VC-WIN32 ms\do_nasm nmake -f ms\ntdll_ica.mak with this result: link /nologo /subsystem:console /opt:ref

[openssl.org #3369] 1.0.1g / Windows / patch - missing ZLIB define in cms_lcl.h

2014-05-30 Thread Stephen Henson via RT
On Fri May 30 16:27:14 2014, krys...@ica.cz wrote: I added file crypto/cms/cms_lcl.h intovariable $crypto in source file util/mkdef.pl:339. Again why did you need to do that? That makes a set of private internal only functions global which isn't something which should be done in OpenSSL

Re: [openssl.org #2578] s_client bind ip

2014-05-30 Thread Krzysztof Kwiatkowski
Hello, I've updated the pull request, so that now it is possible also to bind to local IP and port. I've changed name of the option to -bind. Details available here: https://github.com/openssl/openssl/pull/113 Could you please integrate it to mainstream? Kris On Tue, 2014-05-27 at 11:21

Handling FIPS_R_ERROR_RETRIEVING_ENTROPY/NONCE

2014-05-30 Thread Kevin Fowler
Using FIPS-capable OpenSSL on an embedded system with low entropy collection rates. Several processes startup during system startup, each loading libcrypto. Per latest IGs, modified to run self-tests on library load, requiring OPENSSL_init() call and, hence, DRBG instantiation. It is possible that

Re: Handling FIPS_R_ERROR_RETRIEVING_ENTROPY/NONCE

2014-05-30 Thread Kevin Fowler
Actually, I realized that a call to FIPS_drbg_reseed() is pointless if FIPS_drbg_instantiate() had failed. Instead, the call would need to redo FIPS_drbg_instantiate() after ensuring the default DRBG is properly seeded. On Fri, May 30, 2014 at 12:02 PM, Kevin Fowler kevpfow...@gmail.com wrote:

[openssl.org #3363] Patch to fix bad example in ciphers(1) man page

2014-05-30 Thread Matt Caswell via RT
Hi Hubert The title for this request is slightly misleading as this was actually 3 commits only one of which was regards to an example in ciphers(1). Taking the 3 commits in turn: fix example with DH cipher suites: I don't agree that the man page implies anything about anonymous ECDH when it