Re: [openssl-dev] [openssl.org #4145] Enhancement: patch to support s_client -starttls http

2015-11-18 Thread William A. Rowe Jr. via RT
Please note my typo identified by a dev at httpd, Yann... A little note, probably some missing == here: +else if (meth = TLSv1_2_client_method()) +BIO_printf(fbio, "Upgrade: TLS/1.2\r\n"); +else if (meth = TLSv1_1_client_method()) +BIO_printf(fbio,

[openssl-dev] [openssl.org #4145] Enhancement: patch to support s_client -starttls http

2015-11-17 Thread William A. Rowe Jr. via RT
RFC 2817 defines upgrading HTTP/1.1 to TLS (or SSL). Because Apache httpd supports Connection: Upgrade and Upgrade: TLS/1.x I've gone ahead and instrumented s_client to support this behavior (and noted a small optimization in the same logic stream for starttls support). Attached is the patch to

Re: [openssl.org #2581] bug: Why do these 12 lines of Win32 code work on XP but hang forever in Vista and Windows 7?

2011-08-18 Thread William A. Rowe Jr. via RT
On 8/18/2011 2:58 AM, Mike Nosler via RT wrote: Everything works fine on XP. The code stays in the second BIO_do_accept() waiting for a connection, and sending an HTTPS request from a browser causes BIO_do_accept() to return. On 32-bit Vista Home Premium and 64-bit Windows 7, the second

Re: [openssl.org #2504] Cross Compile MinGW DLLs on Linux

2011-04-27 Thread William A. Rowe Jr. via RT
On 4/27/2011 4:09 PM, Roumen Petrov wrote: May be those files are not up to date . Backup them, try make util/libeay.num make util/ssleay.num after ./Configure and compare with saved. These are auto-generated (in do_*.bat mechanics); perhaps they should have really been a build makefile

[openssl.org #2434] Intermittent failure invoking fipslink.pl

2011-01-18 Thread William A. Rowe Jr. via RT
The logic of invoking invoking the $fips_premain_dso to determine its hash using perl `commandline` syntax, and immediately asking the local linker to overwrite the binary is fundamentally flawed on win32 and probably aix and others, who cannot overwrite a currently executing file. There is no

Re: [openssl.org #2245] [PATCH] Add /Zi to VC++ CFLAG in debug configuration (1.0.0 and 0.9.8)

2010-04-27 Thread William A. Rowe Jr. via RT
On 4/27/2010 5:35 AM, Mounir IDRASSI wrote: Hi, I have on purpose only added /Zi to the debug build because it is not always desirable to add symboles to release builds whereas it is always needed for debug ones. No, it's always desirable, and actually irresponsible not to track symbols

Re: [openssl.org #2245] [PATCH] Add /Zi to VC++ CFLAG in debug configuration (1.0.0 and 0.9.8)

2010-04-26 Thread William A. Rowe Jr. via RT
On 4/26/2010 1:18 PM, Mounir IDRASSI via RT wrote: Hi, This patch adds the /Zi switch to CFLAG in the debug configuration in order to permit stepping inside OpenSSL code during debug sessions. It applied to the latest snapshots of 1.0.0 and 0.9.8 source trees. It should be in base_cflags,