[openssl-dev] [openssl.org #3638] [PATCH] Fix build with -DOPENSSL_NO_SRTP

2014-12-19 Thread Piotr Sikora via RT
Hey guys, 1.0.2-stable and master are currently broken when building with -DOPENSSL_NO_SRTP. Attached patches fix that. Best regards, Piotr Sikora OpenSSL_1_0_2__Fix-build-with-DOPENSSL_NO_SRTP.patch Description: Binary data OpenSSL_master__Fix-build-with-DOPENSSL_NO_SRTP.patch Description:

Re: [openssl-dev] OpenSSL and certain PEM formats

2014-12-19 Thread Sean Leonard
On 12/18/2014 4:41 AM, Salz, Rich wrote: Are you trying to be proscriptive (say what people should use) or descriptive (document what is in use)? Yes, PKCS8-based PRIVATE KEY is better. But RSA PRIVATE KEY is in (wide) use and should be described. I am trying to be proscriptively

Re: [openssl-dev] OpenSSL and certain PEM formats

2014-12-19 Thread Dave Thompson
From: openssl-dev On Behalf Of Salz, Rich Sent: Thursday, December 18, 2014 07:42 Are you trying to be proscriptive (say what people should use) or descriptive (document what is in use)? Yes, PKCS8-based PRIVATE KEY is better. But RSA PRIVATE KEY is in (wide) use and should be described.

Re: [openssl-dev] OpenSSL and certain PEM formats

2014-12-19 Thread Viktor Dukhovni
On Fri, Dec 19, 2014 at 08:47:55AM -0500, Daniel Kahn Gillmor wrote: Does OpenSSL have documented someplace exactly what it means to have a TRUSTED CERTIFICATE? It is a certificate + auxiliary data which specifies a friendly name plus a set of EKUs. For example, say we're talking about a

Re: [openssl-dev] OpenSSL and certain PEM formats

2014-12-19 Thread Viktor Dukhovni
On Fri, Dec 19, 2014 at 07:02:29AM -0800, Sean Leonard wrote: There is also a TRUSTED CERTIFICATE label that OpenSSL uses...I believe this is a vendor-specific extension but now that I am spelunking through the source code I see that it could be abused. Relevant source code/comments say:

Re: [openssl-dev] [openssl.org #3631] Bug in the binary search in OBJ_bsearch_ex_ in obj_dat.c (1.0.1j)

2014-12-19 Thread Matthias Mucha via RT
No, i commented out the RSA encrypt routines and several other things that i can't/don't use. This resulted in a smaller array to search, which led me to this problem. I know it's no problem if you use OpenSSL the normal way. I don't call it from my code. My code only calls methods available

Re: [openssl-dev] OpenSSL and certain PEM formats

2014-12-19 Thread Kurt Roeckx
On Fri, Dec 19, 2014 at 03:05:32PM +, Viktor Dukhovni wrote: On Fri, Dec 19, 2014 at 08:47:55AM -0500, Daniel Kahn Gillmor wrote: Does OpenSSL have documented someplace exactly what it means to have a TRUSTED CERTIFICATE? It is a certificate + auxiliary data which specifies a

Re: [openssl-dev] OpenSSL and certain PEM formats

2014-12-19 Thread Sean Leonard
On Dec 19, 2014, at 11:35 AM, Kurt Roeckx k...@roeckx.be wrote: On Fri, Dec 19, 2014 at 03:05:32PM +, Viktor Dukhovni wrote: On Fri, Dec 19, 2014 at 08:47:55AM -0500, Daniel Kahn Gillmor wrote: Does OpenSSL have documented someplace exactly what it means to have a TRUSTED CERTIFICATE?

[openssl-dev] TMN - Receber aqui os MMS que lhe enviarem

2014-12-19 Thread openssl-dev
Spam detection software, running on the system mta, has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview: [...]