const errors

1999-05-11 Thread Ulf Möller
From: Janez Jere [EMAIL PROTECTED] Subject: cant compile [...] Here is an example of not properly written function, where const parameter is going to be changed with c2l macro, which is wrong, or I dont know enough about C. [...] === void des_ecb_encrypt(const des_cblock in, des_cblock

Re: const errors

1999-05-11 Thread Richard Levitte - VMS Whacker
ben The weird thing, though, is that the error is wrong. c2l does _not_ ben modify its first argument, only the second. Could be a good thing to check the facts. From des_locl.h: [...] #define c2l(c,l)(l =((DES_LONG)(*((c)++))), \ l|=((DES_LONG)(*((c)++)))

Re: const errors

1999-05-11 Thread Ben Laurie
Richard Levitte - VMS Whacker wrote: ben The weird thing, though, is that the error is wrong. c2l does _not_ ben modify its first argument, only the second. Could be a good thing to check the facts. From des_locl.h: I did. What I meant is that it doesn't modify what it points to. [...]

Re: const errors

1999-05-11 Thread Richard Levitte - VMS Whacker
ben That's what I am now wondering - if you do typographic subsitution, then ben c is declared "const char c[8]". Which, in the context, is "const char ben *c". But it seems the compiler is taking it as "char * const c". Which ben is right? The difference is that des_cblock is defined through a

Fix for a small bug in dgst.c

1999-05-11 Thread thulek
Hi, I am not on the mailing list - I just use this way of reporting a fix for a bug I found. The function MAIN in apps/dgst.c incorrectly parses arguments in argc and argv. In effect, it decrements the argument count twice for each argument parsed. As a result, the following will fail:

rsa ssl-c

1999-05-11 Thread Neil Costigan
Stephen, did i ever send you a copy of this ssl-c thing ? /neil begin:vcard n:Costigan;Neil tel;cell:US: 650 .787.7603 Europe: +46.708.977.482 tel;work:US: 650-938-7600 Europe: +46.8.587 288 00 x-mozilla-html:TRUE url:http://www.celocom.com org:A HREF="http://www.celocom.com"Celo

Re: [imp] Re: Big batch of RedHat SRPMs

1999-05-11 Thread mhardy
Quoting \"D. Hugh Redelmeier\" [EMAIL PROTECTED]: I think that OpenSSL has crypto that may not be exported from the US. I don\'t know where 216.103.82.145 is, but you seem to be in the US, so the regulations apply no matter where 216.103.82.145 is. This isn\'t quite the forum, but I will say

RE: const errors

1999-05-11 Thread Salz, Rich
The difference is that des_cblock is defined through a typedef. This is correct explanation. In such a case, you have built a new type This is the wrong reason. Typedef does not introduce a new type, only synonyms for types that could be declared another way. (KR2nd p 221). However "const"

RE:

1999-05-11 Thread Jon Parry-McCulloch
Construct a memory BIO and write your cert to it. You can then read straight out of this memory BIO into a buffer. Summat like this: /*** Function: get_certificate_as_buffer() Input : const char*

Re: X509*xs structure format to DER format

1999-05-11 Thread Sven Hansen
Andrea e Luca Giacobazzi wrote: Hi, how can I convert a certificate from X509*xs structure format to DER format, and put it in a char * string in C, without using a temporary file ? Thanks everibody in advance. Use the i2d_X509 function! -- _, Regards, (_ ,_)ven

Re:

1999-05-11 Thread Dr Stephen Henson
Andrea e Luca Giacobazzi wrote: Hi, how can I convert a certificate from X509*xs structure format to DER format, and put it in a char * string in C, without using a temporary file ? Thanks everibody in advance. You can use a memory BIO but the easiest way is to directly use the ASN1

Re: VMS patches, at last.

1999-05-11 Thread Richard Levitte - VMS Whacker
BTW, unless you tell me something else, I assume it's "back to the drawing table" with me, and that you'll expect a new tarball tomorrow or something like that? Things I planned to do, but was too stressed for last week are: - cleanup of those checks that are made in s_time.c and so on. -

Re: VMS patches, at last.

1999-05-11 Thread Richard Levitte - VMS Whacker
ulf -rw-r--r-- levitte/usr 116191 1999-05-07 14:48 OpenSSL.diffs_to_orig ulf ulf In s_time.c and a number of other files, you add ulf ulf #include io.h ulf extern void exit(); ulf ulf for the ifdef MSDOS case. What good is that? exit() is declared in ulf stdlib.h (according to the

crypto/bn/asm/sparcv8plus.S

1999-05-11 Thread Bodo Moeller
When on a solaris-usparc-gcc system "as" is GNU-as and not the system as (which can happen if the directory containing all the GNU tools occurs early in the PATH -- can we at least rely on the real "as" being available on all systems?), you get lots of error messages: gcc -E asm/sparcv8plus.S |

Re: VMS patches, at last.

1999-05-11 Thread Ulf Möller
-rw-r--r-- levitte/usr 116191 1999-05-07 14:48 OpenSSL.diffs_to_orig In s_time.c and a number of other files, you add #include io.h extern void exit(); for the ifdef MSDOS case. What good is that? exit() is declared in stdlib.h (according to the standard, which Microsoft happens to

Re: X509_STORE_load_locations

1999-05-11 Thread Bodo Moeller
Ron Ramsay [EMAIL PROTECTED]: [...] The global variable verify_error does nothing in the example code. It could be used for communicating with the main-line but this is not shown. Surely it would be better to jettison this variable and to put your own error on ctx-error. In particular, the

R:

1999-05-11 Thread Andrea e Luca Giacobazzi
You're quite right, because OCSP protocol defined by IETF need a server dedicated that work as OCSP responder, and other servers and application send OCSP request to it, but for my certificate lookup patch i used the OCSP patch by Tom Titchener that is conpliant with IETF standard.

R: X509*xs structure format to DER format

1999-05-11 Thread Andrea e Luca Giacobazzi
That's exactly what I tried Sven ! But why the connection stops from netscape, if I put the i2d_X509 calling inside ssl_engine_kernel.c , in ssl_callback_verify routine ? Thanks a lot. Giacob -Messaggio originale- Da: Sven Hansen [EMAIL PROTECTED] A: [EMAIL PROTECTED] [EMAIL PROTECTED]

R: cert der in string

1999-05-11 Thread Andrea e Luca Giacobazzi
Thanks, I'll try it. Why the function PEM_write_X509(...) stops connection if I call it inside ssl_engine_kernel.c ? -Messaggio originale- Da: Jon Parry-McCulloch [EMAIL PROTECTED] A: '[EMAIL PROTECTED]' [EMAIL PROTECTED] Data: martedì 11 maggio 1999 17.56 Oggetto: RE: Construct a

R:

1999-05-11 Thread Andrea e Luca Giacobazzi
Thanks a lot. Giacob -Messaggio originale- Da: Dr Stephen Henson [EMAIL PROTECTED] A: [EMAIL PROTECTED] [EMAIL PROTECTED] Data: martedì 11 maggio 1999 19.43 Oggetto: Re: Andrea e Luca Giacobazzi wrote: Hi, how can I convert a certificate from X509*xs structure format to DER

RE:

1999-05-11 Thread Salz, Rich
I patched ssl_engine_kernel.c to realize an OCSP responder function that check cert status on ldap v2 directory. I am sorry to be a pain in the neck (or lower down :), but you did not. Your code does not do OCSP. OCSP is a status query protocol defined by the IETF. You added "cert lookup" to

No Subject

1999-05-11 Thread Richard Levitte - VMS Whacker
giacob I patched ssl_engine_kernel.c to realize an OCSP responder function giacob that check cert status on ldap v2 directory. Perhaps should you consider sharing the changed file in plain text instead of in rtf format? -- Richard Levitte \ Spannvägen 38, II \ [EMAIL PROTECTED]