[openssl-dev] Changing malloc/debug stuff

2015-12-17 Thread Salz, Rich
I want to change the memory alloc/debug things. Right now there are several undocumented functions to allow you to swap-out the malloc/realloc/free routines, wrappers that call those routines, debug versions of those wrappers, and functions to set the set-options versions of those functions.

Re: [openssl-dev] [openssl.org #4176] Add support for async jobs in OpenSSL speed

2015-12-17 Thread Grandi, Andrea
Hi! I have just pushed an updated version of the patch that addresses the comments of the pull request: https://github.com/openssl/openssl/pull/501 Regards, Andrea -Original Message- From: openssl-dev [mailto:openssl-dev-boun...@openssl.org] On Behalf Of Grandi, Andrea via RT Sent:

Re: [openssl-dev] [openssl-users] Changing malloc/debug stuff

2015-12-17 Thread Viktor Dukhovni
On Thu, Dec 17, 2015 at 09:28:28AM +, Salz, Rich wrote: > I want to change the model so that there are three wrappers around > malloc/realloc/free, and that the only thing you can do is change that > wrapper. This is vastly simpler and easier to understand. I also > documented it. A

Re: [openssl-dev] [openssl-users] Changing malloc/debug stuff

2015-12-17 Thread Salz, Rich
> Does CRYPTO_mem_leaks(bio_err) continue to work after the change? > It is used in the test-suite and is fairly useful for that. Yes it does! ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Re: [openssl-dev] [openssl.org #4185] Bug in EVP_MD_CTX_copy_ex's malloc failure handling

2015-12-17 Thread Kurt Roeckx via RT
On Wed, Dec 16, 2015 at 11:34:56PM +, David Benjamin via RT wrote: > EVP_MD_CTX_copy_ex is implemented with memcpy, followed by manually fixing > up |out->pctx| and |out->md_data|. > >

Re: [openssl-dev] [openssl-users] Changing malloc/debug stuff

2015-12-17 Thread Salz, Rich
> > https://github.com/openssl/openssl/pull/450 > > This seems much more sane. I'll settle for less insane :) ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Re: [openssl-dev] openssl pkeyutl unable to use keys on a PKCS11 token?

2015-12-17 Thread Blumenthal, Uri - 0553 - MITLL
I’m playing with RSA-PSS and PKCS11 engine (in OpenSSL, of course :). This works: $ openssl dgst -engine pkcs11 -keyform engine -sign "pkcs11:object=SIGN%20key;object-type=private;pin-value=123456" -sha256 -sigopt rsa_padding_mode:pss -sigopt rsa_pss_saltlen:-1 -out sig1.out ~/src/wtls-verifier

Re: [openssl-dev] [openssl-users] Changing malloc/debug stuff

2015-12-17 Thread Nico Williams
On Thu, Dec 17, 2015 at 08:16:50PM +, Salz, Rich wrote: > > > https://github.com/openssl/openssl/pull/450 > > > > This seems much more sane. > > I'll settle for less insane :) That is, I think, the best you can do. Some allocations might have taken place by the time a wrapper or

Re: [openssl-dev] [openssl.org #4185] Bug in EVP_MD_CTX_copy_ex's malloc failure handling

2015-12-17 Thread David Benjamin via RT
On Thu, Dec 17, 2015 at 2:43 PM Kurt Roeckx via RT wrote: > On Wed, Dec 16, 2015 at 11:34:56PM +, David Benjamin via RT wrote: > > EVP_MD_CTX_copy_ex is implemented with memcpy, followed by manually > fixing > > up |out->pctx| and |out->md_data|. > > > > >

Re: [openssl-dev] [openssl-users] Changing malloc/debug stuff

2015-12-17 Thread Nico Williams
On Thu, Dec 17, 2015 at 09:28:28AM +, Salz, Rich wrote: > I want to change the memory alloc/debug things. > > Right now there are several undocumented functions to allow you to > swap-out the malloc/realloc/free routines, wrappers that call those > routines, debug versions of those wrappers,

[openssl-dev] [openssl.org #4185] Bug in EVP_MD_CTX_copy_ex's malloc failure handling

2015-12-17 Thread Richard Levitte via RT
Considering we just had a substantial change in digest.c et al, inspiration is the way to go. I figured that these two lines after the first memcpy() would be good enough, as those are the variables that get populated afterward: out->md_data = NULL; out->pctx = NULL; Cheers, Richard Vid Thu, 17

Re: [openssl-dev] openssl pkeyutl unable to use keys on a PKCS11 token?

2015-12-17 Thread Douglas E Engert
"The key ID is not a valid PKCS#11 URI as defined by" comes from the OpenSC  engine code in ./engine_pkcs11.c looks like type or object-type=  will be ignored, but must be cert or private, but if its not, rv may not be set correctly:  486 } else