Re: Openssl build errors on zLinux and HP-ita

2014-09-04 Thread Mrunal Nerpawar
Thanks Andy, zLinux worked with no-asm thanks a ton! I am working on HP-UX now. Regards, Mrunal On Wed, Sep 3, 2014 at 9:11 PM, Andy Polyakov ap...@openssl.org wrote: In the ld man page, I could find help for option +nosectionmerge. +nosectionmerge

[openssl.org #839] Patch pk7_lib.c:PKCS7_get_recip_info()

2014-09-04 Thread Rich Salz via RT
After internal discussoin: PCKS7 is an old API, CMS_ is the way to go. Closing this ticket. -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project http://www.openssl.org Development

[openssl.org #3063] [PATCH] exp_zero_mod_one

2014-09-04 Thread Emilia Käsper via RT
Thanks! This has now been applied to all branches. (Original commit 2b0180c37fa6ffc48ee40caa831ca398b828e680) __ OpenSSL Project http://www.openssl.org Development Mailing List

Re: Openssl build errors on zLinux and HP-ita

2014-09-04 Thread Tom Francis
On Sep 3, 2014, at 11:41 AM, Andy Polyakov ap...@openssl.org wrote: In the ld man page, I could find help for option +nosectionmerge. +nosectionmerge With the -r option, allow procedures to be positioned independently. The default

Adding support for x86

2014-09-04 Thread Tizen
I am working on adding x86 libraries for OpenSSL, so that developers trying to use it need not do the building part. Please add me to the list so that I can understand better on how to make this contribution. Thanks Gayathri

Re: [openssl.org #839] Patch pk7_lib.c:PKCS7_get_recip_info()

2014-09-04 Thread Dmitry Belyavsky
Hello Rich, Does it mean that S/MIME ops will be deprecated? Thank you! On Thu, Sep 4, 2014 at 4:14 PM, Rich Salz via RT r...@openssl.org wrote: After internal discussoin: PCKS7 is an old API, CMS_ is the way to go. Closing this ticket. -- Rich Salz, OpenSSL dev team; rs...@openssl.org

[openssl.org #3070] Bug Report

2014-09-04 Thread Rich Salz via RT
This is a limitation on 32bit platforms where time_t cannot store dates past 2038. -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project http://www.openssl.org Development Mailing

Re: [openssl.org #3334] Win32, SSL_add_dir_cert_subjects_to_stack() does not work.

2014-09-04 Thread Phil Mesnier
Hi Richard, Thank you for following up. I think we are on the same page regarding directories. The API call involved here was SSL_add_dir_cert_subjects_to_stack, which failed on windows. The reason I have the LP_find_file specifically skip directories is that directories cannot be opened as

[openssl.org #3227] Deadlock in OpenSSL 1.0.1e.

2014-09-04 Thread Rich Salz via RT
Sorry, not enough information provided to have any hope of reproducing or debugging this. -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project http://www.openssl.org Development

[openssl.org #3257] [RFE] automatically choose signature hash strength according to key size when generating certificates

2014-09-04 Thread Rich Salz via RT
We use sha256 by default for interoperability. If that's not an issue, set the digest you want directly. -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project http://www.openssl.org

[openssl.org #3260] Several issues with hash algorithm selection in cipher suites

2014-09-04 Thread Rich Salz via RT
We are implementing that the IETF RFC's specify. Closing ticket. -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project http://www.openssl.org Development Mailing List

[openssl.org #1104] [Bug Reoprt] -days parameter overflow

2014-09-04 Thread Stephen Henson via RT
On Thu Sep 04 23:19:14 2014, rsalz wrote: openssl uses time_t for its internal time value. On a platform where time_t is 32 bits, the maximum time value is sometime in the year 2038 Actually this is no longer the case. There was a time_t depencency in OpenSSL 0.9.8 and earlier which caused