Re: [openssl-dev] Fwd: OpenSSL fails to connect to Google on OS X 10.10.3 (Bug Report)

2015-04-21 Thread Dominyk Tiller
but given the trouble this is causing, am I safe to do so in this situation? Thanks, Dominyk Sent from OS X. If you wish to communicate more securely my PGP Public Key is 0x872524db9d74326c. On 20/04/2015 23:52, Matt Caswell wrote: On 18/04/15 14:30, Dominyk Tiller wrote: Apologies

[openssl-dev] OpenSSL fails to connect to Google on OS X 10.10.3 (Bug Report)

2015-04-18 Thread Dominyk Tiller
Apologies that this is kinda badly written. Detailed bug reports aren't my forte. Feel free to ping back questions if detail isn't clear/useful/etc. OS X 10.10.3’s release changed some certs in the Keychain. There’s a full list of changes here: https://gist.github.cok/DomT4/f86618bdfe2f27c8d66a

[openssl-dev] Fwd: OpenSSL fails to connect to Google on OS X 10.10.3 (Bug Report)

2015-04-18 Thread Dominyk Tiller
. Forwarded Message Subject: OpenSSL fails to connect to Google on OS X 10.10.3 (Bug Report) Date: Sat, 18 Apr 2015 14:16:14 +0100 From: Dominyk Tiller dominyktil...@gmail.com To: openssl-dev@openssl.org Apologies that this is kinda badly written. Detailed bug reports aren't my forte

[openssl-dev] Release Checksums

2015-03-19 Thread Dominyk Tiller
Hey guys, Is there any chance OpenSSL can start issuing SHA256 checksums with OpenSSL Releases as well as/instead of MD5/SHA1? MD5 isn't great these days, to say the least, and SHA1 has some potential long-term issues. Both MacPorts and Homebrew on OS X use SHA256 to verify downloads, and not

[openssl-dev] ChaCha20 Poly1305

2015-01-11 Thread Dominyk Tiller
Hey guys, I wanted to check the status of the two ciphers referenced in the subject in OpenSSL. I thought, for some reason, the ChaCha and Poly cipher support was landing in the 1.0.2 branch, but I can't find the respective folders/headers/etc in the git branch. Was I wildly mistaken in that

Re: [openssl-dev] OpenSSL Release Strategy and Blog

2014-12-24 Thread Dominyk Tiller
/12/14 11:37, Yuriy Kaminskiy wrote: Dominyk Tiller wrote: Hey Matt, For some reason, this email is getting flagged as a bad signature by Enigmail. All of your previous emails checked out fine, but this one checked in with a big purple banner on it. His user-agent messed up with line ending

Re: [openssl-dev] OpenSSL Release Strategy and Blog

2014-12-23 Thread Dominyk Tiller
Hey Matt, For some reason, this email is getting flagged as a bad signature by Enigmail. All of your previous emails checked out fine, but this one checked in with a big purple banner on it. Dom Sent from OS X. If you wish to communicate more securely my PGP Public Key is 0x872524db9d74326c.

Query

2014-12-02 Thread Dominyk Tiller
Hey guys, I wanted to query something I saw pop up on the Git earlier: https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=961d2ddb4b48e0e857a704b0cc6b475d63372419 Does that change imply that right now, without that commit, building without SSLv2 and SSLv3 would remove SSL/TLS support for a

Re: Vuln in SSL 3.0

2014-10-14 Thread Dominyk Tiller
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 If there is a threat in SSLv3 it seems almost certain to affect OpenSSL. The upstream dev team not commenting on this is probably fairly standard protocol; I believe they don't comment on anything critical that could be exploited before patches are

Link

2014-08-16 Thread Dominyk Tiller
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Apologies, I'm an idiot and forgot to include the discussion link in the previous email. That is here: https://github.com/Homebrew/homebrew/pull/31631 Dom - -- Sent from Thunderbird for OS X. My PGP public key is automatically attached to this

Default Security Level

2014-08-16 Thread Dominyk Tiller
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hey all, Over at Homebrew we're considering switching to a -no-ssl2 configuration, given the substantial issues with ssl2. I'm pretty sure I read somewhere in the OpenSSL documentation that the recommended default level for compile is level 1,

Re: Default Security Level

2014-08-16 Thread Dominyk Tiller
appreciable security by knocking out those last few ssl2 ciphers? Cheers, Dom On 16 August 2014 18:05, Viktor Dukhovni openssl-us...@dukhovni.org wrote: On Sat, Aug 16, 2014 at 07:45:43AM +0100, Dominyk Tiller wrote: I'm pretty sure I read somewhere in the OpenSSL documentation

Re: OS X OpenSSL

2014-07-25 Thread Dominyk Tiller
. On 24/07/2014 17:15, Jason Beck wrote: I'm running the latest updates on 10.9 and I get 0.9.8y. On 7/24/2014 11:09 AM, Dominyk Tiller wrote: Hey all, I noticed something in the latest Yosemite developer preview - Apple has finally updated the OpenSSL that ships with OS X. We remain

OS X OpenSSL

2014-07-24 Thread Dominyk Tiller
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hey all, I noticed something in the latest Yosemite developer preview - Apple has finally updated the OpenSSL that ships with OS X. We remain on the 0.9.8 branch, but 'Openssl version' now gets the response 'OpenSSL 0.9.8za 5 Jun 2014'. I guess

Re: Website Contribution

2014-07-04 Thread Dominyk Tiller
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Jekyll Sass are another two strong candidates IMO. Dom Sent from Thunderbird for OS X. My PGP public key is automatically attached to this email. On 03/07/2014 20:38, Allan Clark wrote: Hi; I'm a big fan of static pages. They cache easily.

Re: Website Contribution

2014-06-29 Thread Dominyk Tiller
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 If there's genuine interest in modernising the OpenSSL website with HTML CSS instead of wml I'd be willing to code something up. I can't promise to work particularly quickly, but if there's a desire to generate a new website design I'm certainly

SSLv2 SSLv3

2014-06-28 Thread Dominyk Tiller
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hey all, I wondered if you all had an opinion on disabling SSLv2 SSLv3 during the ./configure process, and what kind of impact that'd have for end-users and general compatibility when building against an updated version of OpenSSL. It's a