Re: [openssl-dev] [openssl.org #3712] TLS Renegotiation with Java is broken

2015-10-09 Thread Alessandro Ghedini via RT
On Fri, Oct 09, 2015 at 06:05:19pm +, Matt Caswell via RT wrote: > > > On 09/10/15 19:02, Hubert Kario via RT wrote: > > And for good measure, I also created a test script that > > combines fragmentation with interleaving. > > Did you try my patch with it? And if so what happened? I just tr

Re: [openssl-dev] [openssl.org #3712] TLS Renegotiation with Java is broken

2015-10-09 Thread Hubert Kario via RT
On Friday 09 October 2015 18:05:19 Matt Caswell via RT wrote: > On 09/10/15 19:02, Hubert Kario via RT wrote: > > And for good measure, I also created a test script that > > combines fragmentation with interleaving. > > Did you try my patch with it? And if so what happened? no, I didn't (sorry, i

Re: [openssl-dev] [openssl.org #3712] TLS Renegotiation with Java is broken

2015-10-09 Thread Matt Caswell via RT
On 09/10/15 19:02, Hubert Kario via RT wrote: > And for good measure, I also created a test script that > combines fragmentation with interleaving. Did you try my patch with it? And if so what happened? Thanks Matt ___ openssl-dev mailing list To u

Re: [openssl-dev] [openssl.org #3712] TLS Renegotiation with Java is broken

2015-10-09 Thread Hubert Kario via RT
And for good measure, I also created a test script that combines fragmentation with interleaving. In other words, checks if writing first part of Handshake protocol message, Application Data and then rest of Handshake protocol message is handled correctly. The script is in the same repository, na

[openssl-dev] [openssl.org #4084] correction to the message i sent earlier...

2015-10-09 Thread Matt Caswell via RT
Closing ticket. Matt ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Re: [openssl-dev] [openssl.org #4084] correction to the message i sent earlier...

2015-10-09 Thread christian fafard via RT
Thank you and sorry for that mess. I did a copy-paste from emacs and realize after, that there was no "cr-lf" so my email is unreadable.I'll get it right next time. What i've tried to say basically is that the "negate regex match" construct "!//" doesn't work with some versions of perl. I suggest

[openssl-dev] Patch for openssl_1_0_2 link failure when OPENSSL_NO_SHA512 defined

2015-10-09 Thread John Peck
I discovered that when OPENSSL_NO_SHA512 is defined, the openssl_1_0_2 stable branch build fails during the link step with unresolved symbol EVP_sha384. The attached patch fixes this issue. p...@bay2sierra.com Mobile: +1-415-420-8449 From 235d61e3b8d1c0635d18216384c72cdeded3c961 Mon Sep 17

Re: [openssl-dev] [openssl.org #4084] correction to the message i sent earlier...

2015-10-09 Thread Alessandro Ghedini via RT
This was supposed to be a reply to another message (#4083), but a new report has been created instead. I think it can be closed. Cheers ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Re: [openssl-dev] [openssl.org #4080] Malformed Client Hello messages are accepted (session_id length)

2015-10-09 Thread Alessandro Ghedini via RT
On Thu, Oct 08, 2015 at 07:57:21pm +, Alessandro Ghedini via RT wrote: > On Thu, Oct 08, 2015 at 06:26:27pm +, Alessandro Ghedini via RT wrote: > > On Thu, Oct 08, 2015 at 06:14:00pm +, Alessandro Ghedini via RT wrote: > > > On Thu, Oct 08, 2015 at 05:19:06pm +, Alessandro Ghedini v

[openssl-dev] [openssl.org #4060] a crash happened inside SSL_Connect function

2015-10-09 Thread Emilia Käsper via RT
Closing, because it's not an OpenSSL defect, but feel free to continue the discussion on openssl-users. Cheers, Emilia ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

[openssl-dev] [openssl.org #3987] Bug report about crash related to ASN1_primitive_free

2015-10-09 Thread Emilia Käsper via RT
I'm afraid we can't tell from your report whether the bug is in OpenSSL or in your application code. We need a reproducible report - for example, a standalone code snippet, or a sample input to the openssl command-line tool. Cheers, Emilia ___ openssl-d