Re: [openssl-dev] [openssl.org #3771] bug: s_client loop at 100% cpu

2015-03-30 Thread Rainer Jung
Am 30.03.2015 um 09:51 schrieb John Denker via RT: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Contrast the following two examples: #1: time : | openssl s_client -connect www.openssl.org:443 /dev/null real0m0.545s user0m0.000s sys 0m0.000s #2: time : | openssl s_client -quiet

Re: [openssl-dev] [openssl.org #3771] bug: s_client loop at 100% cpu

2015-03-30 Thread Rainer Jung
Am 30.03.2015 um 10:27 schrieb Rainer Jung: So this probably works as designed and when just running openssl s_client -connect www.openssl.org:443 Oups, I meant: openssl s_client -quiet -connect www.openssl.org:443 you shouldn't notice CPU hogging. Why -ign_eof is set as a side effect of

[openssl-dev] [openssl.org #3771] bug: s_client loop at 100% cpu

2015-03-30 Thread John Denker via RT
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Contrast the following two examples: #1: time : | openssl s_client -connect www.openssl.org:443 /dev/null real0m0.545s user0m0.000s sys 0m0.000s #2: time : | openssl s_client -quiet -connect www.openssl.org:443 /dev/null real

[openssl-dev] [openssl.org #3772] Bug: Only ActivePerl could be used to build on Windows

2015-03-30 Thread esado...@eniks.com via RT
It is well known issue with build on Windows: It requires ActivePerl to correctly create configuration. Every other Perl implementation fails to execute correctly. The reason it fails outlined in this report: https://github.com/openssl/openssl/issues/174 Although it is stated that only cloned

Re: [openssl-dev] [openssl.org #3771] bug: s_client loop at 100% cpu

2015-03-30 Thread Rainer Jung via RT
Am 30.03.2015 um 09:51 schrieb John Denker via RT: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Contrast the following two examples: #1: time : | openssl s_client -connect www.openssl.org:443 /dev/null real0m0.545s user0m0.000s sys 0m0.000s #2: time : | openssl

Re: [openssl-dev] s3_clnt.c changes regarding external pre-shared secret seem to break EAP-FAST

2015-03-30 Thread Emilia Käsper
On Fri, Mar 27, 2015 at 7:19 PM, Erik Tkal etks...@gmail.com wrote: Hi Emelia, I’m not sure that will work as presently designed, as it keys off of the session object: -if (s-version = TLS1_VERSION s-tls_session_secret_cb) { +if (s-version = TLS1_VERSION s-tls_session_secret_cb

[openssl-dev] [openssl.org #3615] [PATCH] ChaCha20 with Poly1305 TLS Cipher Suites via the EVP interface

2015-03-30 Thread Andrew Moon via RT
(I hope I'm doing this right) These are my Chacha implementations for reference, x86, SSE2, SSSE3, XOP, AVX, and AVX2, and Poly1305 implementations for reference, SSE2, AVX, and AVX2 for both 32 and 64 bits. (djb's floating point poly1305 is used for 32 bits). I do things a bit differently with

Re: [openssl-dev] s3_clnt.c changes regarding external pre-shared secret seem to break EAP-FAST

2015-03-30 Thread Emilia Käsper
On Fri, Mar 27, 2015 at 10:40 PM, Brian Smith br...@briansmith.org wrote: Brian Smith br...@briansmith.org wrote: Although the RFC4851 (an informational RFC documenting EAP-FAST) does not require the server to send the session ticket extension during resumption, it is based on

Re: [openssl-dev] [openssl.org #3772] Bug: Only ActivePerl could be used to build on Windows

2015-03-30 Thread Jeremy Farrell
For what it's worth: I've been building OpenSSL releases on Windows for many years without problems, and I've only ever used Strawberry Perl. I don't think the problem applies to official release tarballs. On 30/03/2015 08:51, esado...@eniks.com via RT wrote: It is well known issue with build

[openssl-dev] [openssl.org #3773] [PATCH] Configure support for OCTEON boards

2015-03-30 Thread Marisetti, Balaji via RT
This patch adds Cavium Networks' OCTEON target to Configure file. The diff is taken against OpenSSL-1.0.2a release. Thanks, Balaji M diff -u ./openssl-1.0.2a/Configure ./openssl-1.0.2a-octeon/Configure --- ./openssl-1.0.2a/Configure 2015-03-19 19:00:36.0 +0530 +++