[openssl.org #449] [Fwd: Bug#176059: openssl: ca shows CSR contents, not preview of certificate]

2003-01-10 Thread Stephen Henson via RT
[[EMAIL PROTECTED] - Fri Jan 10 15:10:09 2003]: > Ugh, can't quote the original message... This refers to OpenSSL 0.9.6X which does indeed only show the DN of the CSR (or pseudo CSR in the case of SPKACs) including the old mishandling of multibyte string types. That's one reason why I didn't

Re: [openssl.org #434] duplicate execution of callback with non-blockingSSL_accept

2003-01-10 Thread John Pruitt
Lutz Jaenicke via RT wrote: [[EMAIL PROTECTED] - Fri Jan 3 08:21:38 2003]: When a non-blocking SSL_accept() returns -1 with SSL_ERROR_WANT_READ or SSL_ERROR_WANT_WRITE set, the appropriate thing to do is to call SSL_accept() again. This is fine, but the current state machine in ssl3_acce

Re: [openssl.org #433] 0.9.7 compilation problem with Borland C++ 5.5

2003-01-10 Thread Frédéric L. W. Meunier via RT
On Fri, 10 Jan 2003 21:27:56 +0100 (MET), "Lutz Jaenicke via RT" <[EMAIL PROTECTED]> said: > > [[EMAIL PROTECTED] - Fri Jan 3 06:45:12 2003]: > > > I'm trying to compile 0.9.7 with Borland C++ 5.5 and NASM 0.98.35 on > > Windows XP Professional SP1 with all updates. > > > > I did > > >

[openssl.org #408] Segmentation Fault (openssl-0.9.7-beta6)

2003-01-10 Thread Lutz Jaenicke via RT
[levitte - Fri Dec 20 09:28:56 2002]: > Looks to me like everything was successful, really, even index.txt is > up to date. Do you have the possibility to debug and find out exactly > where the segfault happened? > > [[EMAIL PROTECTED] - Wed Dec 18 17:22:44 2002]: > > > While executin

[openssl.org #431] Help

2003-01-10 Thread Lutz Jaenicke via RT
[[EMAIL PROTECTED] - Thu Jan 2 13:14:21 2003]: > Hello, > > I would configure and install a certification from openssl for Windows > 2000 IIS. This is not a bug or enhancement report with respect to the OpenSSL package. Please ask your question on the openssl-users mailing list. Be

Re: [openssl.org #450] openssl-0.9.7 not building with ncr-scde

2003-01-10 Thread Tim Rice
On Fri, 10 Jan 2003, Tim Rice wrote: > On Fri, 10 Jan 2003, Megele, Martin via RT wrote: > > > Undefined first referenced > > symbol in file > > strcasecmp ca.o > > Try adding -lresolv > > > ftime

[openssl.org #433] 0.9.7 compilation problem with Borland C++ 5.5

2003-01-10 Thread Lutz Jaenicke via RT
[[EMAIL PROTECTED] - Fri Jan 3 06:45:12 2003]: > I'm trying to compile 0.9.7 with Borland C++ 5.5 and NASM 0.98.35 on > Windows XP Professional SP1 with all updates. > > I did > > perl Configure BC-32 no-idea no-mdc2 no-rc5 > ms\do_nasm > make -f ms\bcb.mak > > It fails at: > >

[openssl.org #434] duplicate execution of callback with non-blocking SSL_accept

2003-01-10 Thread Lutz Jaenicke via RT
[[EMAIL PROTECTED] - Fri Jan 3 08:21:38 2003]: > When a non-blocking SSL_accept() returns -1 with SSL_ERROR_WANT_READ > or > SSL_ERROR_WANT_WRITE set, the appropriate thing to do is to call > SSL_accept() again. > > This is fine, but the current state machine in ssl3_accept() doesn't >

Re: [openssl.org #450] openssl-0.9.7 not building with ncr-scde

2003-01-10 Thread Tim Rice
On Fri, 10 Jan 2003, Megele, Martin via RT wrote: > > Hello, > > i try building openssl-0.9.7 on an ncr server using ./Configure ncr-scde > ( uname -a: cti1dev cti1dev 4.0 3.0 3360,3430-R Pentium(TM)-MCA > login info: Welcome to the NCR MP-RAS SVR4 UNIX System > UNIX System V Rel

[openssl.org #450] openssl-0.9.7 not building with ncr-scde

2003-01-10 Thread Megele, Martin via RT
Hello, i try building openssl-0.9.7 on an ncr server using ./Configure ncr-scde ( uname -a: cti1dev cti1dev 4.0 3.0 3360,3430-R Pentium(TM)-MCA login info: Welcome to the NCR MP-RAS SVR4 UNIX System UNIX System V Release 4.0 (cti1dev) (pts/0) ) and i get the following linker error

Re: [ANNOUNCE] OpenSSL 0.9.7 released

2003-01-10 Thread Corinna Vinschen
On Thu, Jan 09, 2003 at 10:35:16PM +0100, Corinna Vinschen wrote: > The "2" is just sort of a counter which is needed to allow more than > [...] Hi, I have chosen another packaging method: Version 0.9.6h will consist only of the needed DLLs to link applications build against it. The packag

Re: [openssl.org #437] bad instructions in CHANGES forplatform-dependent builds

2003-01-10 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Fri, 10 Jan 2003 08:53:37 -0800 (PST), Tim Rice <[EMAIL PROTECTED]> said: tim> Before moving to a read-only tree I had one platform's build modifying tim> some of the generated source files that another platform would use/modify tim> causing some problems. Moving

Re: [openssl.org #437] bad instructions in CHANGES for platform-dependentbuilds

2003-01-10 Thread Tim Rice
On Fri, 10 Jan 2003, Richard Levitte via RT wrote: > > [[EMAIL PROTECTED] - Sat Jan 4 19:22:11 2003]: > > Now I clean up after patch and remove files made from .in files > > find . -name "*.orig" -exec rm -f {} \; > > rm -f Makefile.ssl apps/CA.pl apps/der_chop \ > > crypto/o

Re: [openssl.org #423]openssl-0.9.7-stable-SNAP-20021229:lddproblems

2003-01-10 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Fri, 10 Jan 2003 17:40:18 +0100, Andy Polyakov <[EMAIL PROTECTED]> said: appro> > Unfortunately, about -R/-rpath, I've avoided it so far for exactly the appro> > reason you mentioned: it doesn't quite support moving libraries to a appro> > dofferent place and sti

Re: [openssl.org #423]openssl-0.9.7-stable-SNAP-20021229:lddproblems

2003-01-10 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Fri, 10 Jan 2003 17:40:18 +0100, Andy Polyakov <[EMAIL PROTECTED]> said: appro> > And also, I have understood appro> > that libssl.so does need a -R/-rpath to be able to find libcrypto.so, appro> > on which it depends. appro> appro> This is not true. The fact th

Re: [openssl.org #423] openssl-0.9.7-stable-SNAP-20021229:lddproblems

2003-01-10 Thread Andy Polyakov
> Unfortunately, about -R/-rpath, I've avoided it so far for exactly the > reason you mentioned: it doesn't quite support moving libraries to a > dofferent place and still have it work. And that is what I'm suggesting to adhere to. I.e. to avoid it (and even to remove it from tru64!) and leave thi

[openssl.org #423] openssl-0.9.7-stable-SNAP-20021229: ldd problems

2003-01-10 Thread Richard Levitte via RT
I just committed the final change that makes 'make install' print a recommendation on handling the shared libraries of such a thing was installed anywhere else than in /usr/lib. The text that's shown is rather close to the one suggested by Jeff, with additions about pkg-config and a reordering

Re: [openssl.org #423] openssl-0.9.7-stable-SNAP-20021229:lddproblems

2003-01-10 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Fri, 10 Jan 2003 15:03:00 +0100, Andy Polyakov <[EMAIL PROTECTED]> said: appro> There is another option, "The Right Thing":-) Of course :-). Unfortunately, about -R/-rpath, I've avoided it so far for exactly the reason you mentioned: it doesn't quite support mo

[openssl.org #437] bad instructions in CHANGES for platform-dependent builds

2003-01-10 Thread Richard Levitte via RT
[[EMAIL PROTECTED] - Fri Jan 10 16:35:08 2003]: > I think a sufficient requirement is that files in the source tree that > are relative links need to be recreated as relative links within the > platform dependent directory. exactly. > If you just leave out the "-o -type l" > you won't make any

Re: [openssl.org #437] bad instructions in CHANGES for platform-dependent builds

2003-01-10 Thread [EMAIL PROTECTED] via RT
I'll try the next snapshot.Thanks. __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [

Re: [openssl.org #437] bad instructions in CHANGES for platform-dependent builds

2003-01-10 Thread [EMAIL PROTECTED] via RT
I think a sufficient requirement is that files in the source tree that are relative links need to be recreated as relative links within the platform dependent directory. If you just leave out the "-o -type l" you won't make any of the links, and the include/openssl directory will be empty, which

[openssl.org #449] [Fwd: Bug#176059: openssl: ca shows CSR contents, not preview of certificate]

2003-01-10 Thread Christoph Martin via RT
__ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

[openssl.org #448] [Fwd: Bug#176062: openssl: Expired certificates and recertification]

2003-01-10 Thread Christoph Martin via RT
__ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

[openssl.org #447] [Fwd: Bug#176058: openssl: Should ask password only after basic input validation]

2003-01-10 Thread Christoph Martin via RT
__ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

Re: [openssl.org #423] openssl-0.9.7-stable-SNAP-20021229: lddproblems

2003-01-10 Thread Andy Polyakov
> -- > OpenSSL Shared Libraries have been installed in: >[directory name] > > If this directory is not in a standard system path for dynamic/shared > libraries, then you will have problems linking and executing > applications

Re: [openssl.org #423] openssl-0.9.7-stable-SNAP-20021229: ldd problems

2003-01-10 Thread Richard Levitte - VMS Whacker via RT
OK, I've hacked a little. Please try the following patch on a 0.9.7 snapshot, and put the attached openssl-shared.txt in doc/: Index: Makefile.org === RCS file: /e/openssl/cvs/openssl/Makefile.org,v retrieving revision 1.154.2.49 di

Re: [openssl.org #423] openssl-0.9.7-stable-SNAP-20021229: lddproblems

2003-01-10 Thread Richard Levitte - VMS Whacker
OK, I've hacked a little. Please try the following patch on a 0.9.7 snapshot, and put the attached openssl-shared.txt in doc/: Index: Makefile.org === RCS file: /e/openssl/cvs/openssl/Makefile.org,v retrieving revision 1.154.2.49 dif

Re: [openssl.org #432] pkcs#11 engine for openssl 0.9.7 & 0.9.6

2003-01-10 Thread Götz Babin-Ebell
Richard Levitte via RT wrote: Hello Richard, It's unfortunate that cryptoki.h is GPLd, or I would put it in our contribution area. GPL is not compatible with the OpenSSL license. Is it possible to get a different cryptoki.h? Also, is conf.h really necssary? conf.h is only incuded if HAVE_CON

[openssl.org #437] bad instructions in CHANGES for platform-dependent builds

2003-01-10 Thread Richard Levitte via RT
[[EMAIL PROTECTED] - Sat Jan 4 19:22:11 2003]: > On Sat, 4 Jan 2003, Nick Briggs via RT wrote: > > [snip] > > # Place yourself outside of the OpenSSL source tree. In > > # this example, the environment variable OPENSSL_SOURCE > > # is assumed to contain the absolute Ope

[openssl.org #437] bad instructions in CHANGES for platform-dependent builds

2003-01-10 Thread Richard Levitte via RT
I've removed '-o -type l' from the note in CHANGES. I've also added a note on separate build directories at the end of INSTALL. Finally, I've made sure that test/testgen removes the files it generates if they exist before the actual generation. I've tested this against a read-only source tree

[openssl.org #437] bad instructions in CHANGES for platform-dependent builds

2003-01-10 Thread Richard Levitte via RT
[[EMAIL PROTECTED] - Sat Jan 4 12:04:29 2003]: > These instructions, from the CHANGES file: > > == > *) Add appropriate support for separate platform-dependent build > directories. The recommended way to make a platform-dependent > build directory is the following (tested o

[openssl.org #432] pkcs#11 engine for openssl 0.9.7 & 0.9.6

2003-01-10 Thread Richard Levitte via RT
It's unfortunate that cryptoki.h is GPLd, or I would put it in our contribution area. GPL is not compatible with the OpenSSL license. Is it possible to get a different cryptoki.h? Also, is conf.h really necssary? I'm willing to do the transformation needed for this bundle to work properly wit

Add CRL in verify chain

2003-01-10 Thread p b
Hi, I have made a client - server connexion using TLS, In order to check the cert, I use the SSL_CTX_load_verify_locations function to load the AC cert, And SSL_CTX_use_certificate_file function to load the client cert. Which function should I use in order to load the CRL file ? Thanks __

Get client IP

2003-01-10 Thread p b
Hi, I use BIO to make a client-server connexion, For the server, How can I get the IP of the client when a connexion is accepted Thanks __ OpenSSL Project http://www.openssl.org Development Mai

[openssl.org #446] memory bug in BN_generate_prime()

2003-01-10 Thread Richard Levitte via RT
Quite. I've committed that change. This ticket is now resolved. [[EMAIL PROTECTED] - Fri Jan 10 08:44:13 2003]: > > > During our memory stress testing we discovered a bug in the > BN_generate_prime() function. In the case that the creation of a new BN_CTX > fails (line 143), execution drops

[openssl.org #445] typos in man pages

2003-01-10 Thread Richard Levitte via RT
I've made the corrections (most were already there) in 0.9.7a-dev and 0.9.8-dev. This ticket is now resolved. [[EMAIL PROTECTED] - Fri Jan 10 08:44:04 2003]: > Hello, > > Some typos in the openssl man pages were discovered (see NetBSD's PR > misc/19627 > http://www.NetBSD.org/cgi-bin/query-pr-