[openssl.org #659] Bug in ssl3_get_client_hello()

Hi while experimenting with SSL protocol extensions I think I found a newly introduced bug. In fact there was a fault in an if-statement for a long time and now it has been corrected. But I think the code is not compilant with the SSL-3.0 spec, which reads: "Forward compatibility note: In t

[openssl.org #658] Bug in ssl_asn1.s/d2i_SSL_SESSION()

Hi I think I found a bug (which has no real effect) in d2i_SSL_SESSION(). In the code snippet below from my point of view the SSL3_VERSION should read SSL3_VERSION_MAJOR or even 3 (literal)! if ((ssl_version>>8) == SSL3_VERSION) i=SSL3_MAX_SSL_SESSION_ID_LENGTH;

[openssl.org #657] v3_prn.c cosmetical bug/patch

Hi I think there are 2 cosmetical bugs in v3_prn.c. 1.) The indentation of the v3 extension values is fix '12' instead of 'indent + 4' 2.) After the last multi-line extension value the '\n' should not be printed See attached a patch. best regards Matthias __

Bug in ssl3_get_client_hello()

Hi while experimenting with SSL protocol extensions I think I found a newly introduced bug. In fact there was a fault in an if-statement for a long time and now it has been corrected. But I think the code is not compilant with the SSL-3.0 spec, which reads: "Forward compatibility note: In the i

Bug in ssl_asn1.s/d2i_SSL_SESSION()

Hi I think I found a bug (which has no real effect) in d2i_SSL_SESSION(). In the code snippet below from my point of view the SSL3_VERSION should read SSL3_VERSION_MAJOR or even 3 (literal)! if ((ssl_version>>8) == SSL3_VERSION) i=SSL3_MAX_SSL_SESSION_ID_LENGTH; el

Re: [Fwd: PKCS#11 engines revisited]

ERACopenssl-engine-0.9.6b.patch.gz > > Trustway: openssl-engine-0.9.6c-tw.patch > > Note: the contributions will not appear in 0.9.6. That branch of > OpenSSL is in freeze, and will only be updated with bug-fixes. > 0.9.7 is a different matter, I'm currently looking at thi

Release date of 0.9.7

tc lewis wrote: > > it was released on september 24th, 2000... SORRY, I meant 0.9.7!! regards Matthias > > -tcl. > > On Tue, 6 Mar 2001, Matthias Loepfe wrote: > > > Hi > > > > Do you have any idea (plan) when you will release OpenSSL

Release date of 0.9.6

Hi Do you have any idea (plan) when you will release OpenSSL 0.9.6? regards Matthias ++ | Matthias LoepfeCTOAdNovum Informatik AGCH-8005 Zuerich | | [EMAIL PROTECTED] Tel.+41 1 272 6111 Fax.+41 1 272 6312

PKCS#11 support in OpenSSL-0.9.5?

done --- Matthias Loepfe, AdNovum Informatik AG, Roentgenstr. 22, CH-8005 Zurich Email: [EMAIL PROTECTED] Voice: +41 1 272 6111 Fax: +41 1 272 6312 __ Op

Re: ssl3_choose_cipher

Hi again, Does really NOBODY has anything to say about the following? Shouldn't the server try to always choose the best available cipher? regards Matthias Matthias Loepfe wrote: > > Hi > > I have fundamental question regarding choosing the chipher in SSL. The spec >

ssl3_choose_cipher

he questions: 1) Is (from the spec point of view) the server side allowed to choose according to his own preferences? 2) Why should the server not enforce his own preference?

base64 decoder broken

Hi The problem I (not me - I only post this report for an other guy) discovered only happens when the input (encoded form) is not "well" formatted (i.e. exactly 64 characters per line). The OpenSSL base64 decoder allows inputs containing white spaces and skip them. However, due to data bufferin

cvs tag OpenSSL_0_9_3a missing

Hi I'm wondering why in the cvs repository the tag OpenSSL_0_9_3a is missing. Or is this at the end correct? regards Matthias --- Matthias Loepfe, AdNovum Informatik AG, Roentgenstr. 22, CH-8005 Zurich Email: [

Re: binary compatibility

Ben Laurie wrote: > > Matthias Loepfe wrote: > > > > Hi > > > > I just realized that SSLeay-0.9.0 and OpenSSL-0.9.2 are not binary compatible > > at all (I'm using shared libs). It seems that at least some structures have > > changed in a incompatib

binary compatibility

gards Matthias --- Matthias Loepfe, AdNovum Informatik AG, Roentgenstr. 22, CH-8005 Zurich Email: [EMAIL PROTECTED] Voice: +41 1 272 6111 Fax: +41 1 272

OpenSSL not binary compatible with SSLeay

ard Matthias ------- Matthias Loepfe, AdNovum Informatik AG, Roentgenstr. 22, CH-8005 Zurich Email: [EMAIL PROTECTED] Voice: +41 1 272 6111 Fax: +41 1 272 6312 __ OpenSSL Project http://ww

util/clean-depend.pl and older perl

27 < foreach my $dep (sort @{$files{$file}}) { --- > my $dep=""; > foreach $dep (sort @{$files{$file}}) { regards Matthias Loepfe ------- Matthias Loepfe, AdNovum Informatik AG, Roentge

Configure

line and the attached script (shlib/solaris-sc4.sh). diff -r1.9 Configure 107a108,110 > > "solaris-sparc-sc4-pic","cc:-xO5 -Xa -DB_ENDIAN -KPIC:-lsocket -lnsl:\ > BN_LLONG RC4_CHAR DES_PTR DES_RISC1 DES_UNROLL BF_PTR:asm/sparc.o::", regards Matthias Loepfe

util/perlpath.pl

5' 19,20c19,25 < < $a[0]="#!$ARGV[0]/perl\n"; --- > > if (-d $ARGV[0]) { >$a[0]="#!$ARGV[0]/perl\n"; > } > else { > $a[0]="#!$ARGV[0]\n"; > } regards Matthias Loepfe ---

Re: openssl-SNAP-19990308-2130 on Solaris-2.6 SC4

> OpenSSL Project http://www.openssl.org > Development Mailing List [EMAIL PROTECTED] > Automated List Manager [EMAIL PROTECTED] --

openssl-SNAP-19990308-2130 on Solaris-2.6 SC4

49cc input word alignment test 0 1 2 3 output word alignment test 0 1 2 3 fast crypt test make[1]: *** [test_des] Error 1 Exactly the same happens with the HEAD version out of the CVS. Matthias ------- Matthias Loepfe, AdNo

make rehash fails

the OPENSSL envvar is not set for the rehash target. After I changed it, like the last line of the 'link' target it worked fine. OpenSSL-0.9.2 SunOS 5.6, SPARC Best regards Matthias --- Matthias Loepfe