Re: Engine version build problems under win32

From: Baber Amin [EMAIL PROTECTED] BAMIN I am trying to build the engine version (0.9.6c-engine) under win32 BAMIN using VC6.x. It seems to be going fine till the compile for hw_aep.c, BAMIN which includes unistd.h. That seems to cause problems under win32. Replace that inclusion line with

Futher debug of race condition in 0.9.6b/c

sshd/ftpd/telnetd - pam_ldap - libldap - libssl/libcrypto To recap, when my dual processor Pentium III is idle, I *always* get a return value of 0 from SSL_connect. If I bog down the box, I get 1 and everything works (login sucessful). I added a check for SSL_get_error, and I get

RE: Futher debug of race condition in 0.9.6b/c

On Fri, 8 Feb 2002, Howard Chu wrote: Try using strace to log all system calls. Until you know which calls have failed, it's tough to isolate what's going on. when using strace on sshd, I couldn't get it to fail. Not using strace, it fails every time. Dax

Re: Futher debug of race condition in 0.9.6b/c

On Fri, Feb 08, 2002 at 01:53:11AM -0700, Dax Kelson wrote: sshd/ftpd/telnetd - pam_ldap - libldap - libssl/libcrypto To recap, when my dual processor Pentium III is idle, I *always* get a return value of 0 from SSL_connect. If I bog down the box, I get 1 and everything works (login

Re: SQL DB instead of index.txt

Dr S N Henson wrote: Ben Laurie wrote: Dr S N Henson wrote: The self signed cert was only an example. There are other cases which could apply as well. An example would be explicit trust of an EE certificate. That isn't supported in OpenSSL yet but it will be at some

make report

I'm a complete Linux newbie here, submitting this report for the common good. I'm trying to get sshd working on my RedHat 7.2 box and this openssl install was the last in a series of frustrations. Hope it helps someone somewhere. Thanks, Chaz Checking compiler... Running make... make[1]:

Re: bug in openssl session cache

On Thu, Feb 07, 2002 at 03:38:32PM +0200, Izhar Shoshani Levi wrote: I found a bug in ssl session cache, please check it. SSL_CTX_session_remove trying to find the session in the cache and delete it but when calling SSL_SESSION_list_remove, in case that r != NULL the wrong session is sent to

Re: make report

Charles McCabe wrote: I'm a complete Linux newbie here, submitting this report for the common good. I'm trying to get sshd working on my RedHat 7.2 box and this openssl install was the last in a series of frustrations. Hope it helps someone somewhere. [snip] gcc -I.. -I../../include

REMOVE

REMOVE --- http://www.freemail.gr - äùñåÜí õðçñåóßá çëåêôñïíéêïý ôá÷õäñïìåßïõ. __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED]

Re: an attack against SSH2 protocol

Wei Dai [EMAIL PROTECTED]: [Posted to sci.crypt and the IETF SSH working group mailing list.] Phil Rogaway observed that CBC mode is not secure against chosen- plaintext attack if the IV is known or can be predicted by the attacker before he choses his plaintext [1]. Similarly, CBC mode

Re: race condition in openssl 0.9.6b/c

Dax Kelson [EMAIL PROTECTED]: I'm having a problem where two RHL7.2 LDAP clients out of many don't authenticate against an OpenLDAP server. They are using starttls to connect to the server. The chain is sshd - pam_ldap - openldap - OpenSSL. In openldap-2.0.21/libraries/libldap/tls.c