[openssl.org #444] Win32 crash in PEM_read_X509

2003-01-13 Thread Stephen Henson via RT
[steve - Fri Jan 10 01:33:03 2003]: > I've managed to download SP5 and the processor add on pack. > > With VC++ 6.0 and SP5 only it passes all tests. > > With VC++ 6.0, SP5 and processor add on it misbehaves and things like > AES give invalid results. > > After playing around with various opti

[openssl.org #433] 0.9.7 compilation problem with Borland C++ 5.5

2003-01-13 Thread Stephen Henson via RT
[[EMAIL PROTECTED] - Fri Jan 10 21:48:32 2003]: > > I tried 0.9.7 before succesfully compiling 0.9.6h. > > As Doug Kaufman suggested for some reason asn1t.h doesn't get > included. I > had to manually edit a dozen source files. > > I also have Cygwin in c:\cygwin, but my PATH shows: > > PATH=

[openssl.org #447] [Fwd: Bug#176058: openssl: Should ask password only after basic input validation]

2003-01-13 Thread Richard Levitte via RT
[[EMAIL PROTECTED] - Mon Jan 13 18:47:42 2003]: > "openssl ca" is one of them, and probably the most cumbersome. > "openssl req -new -out $FILE" does not verify that $FILE is a writable > file. I suspected 'openssl ca' was one of them. As to the 'openssl req' example you give, so what? The pro

Re: [openssl.org #447] [Fwd: Bug#176058: openssl: Should ask password only after basic input validation]

2003-01-13 Thread Florian Weimer via RT
"Richard Levitte via RT" <[EMAIL PROTECTED]> writes: > It would be good to know exactly which openssl commands are involved > in this issue. I'm pretty sure this issue only applies for some of > them. "openssl ca" is one of them, and probably the most cumbersome. "openssl req -new -out $FILE" d

[openssl.org #440] wrong read() protype

2003-01-13 Thread Richard Levitte via RT
I just applied your patch and will commit soon. Please check tomorrows snapshot. This ticket is now resolved. [[EMAIL PROTECTED] - Sun Jan 5 10:50:22 2003]: > Some test-files include a protype for read(). Unfortunately this > protype doesn't > match the one in djgpp's . Can we not removed thi

[openssl.org #447] [Fwd: Bug#176058: openssl: Should ask password only after basic input validation]

2003-01-13 Thread Richard Levitte via RT
[[EMAIL PROTECTED] - Fri Jan 10 15:08:41 2003]: It would be good to know exactly which openssl commands are involved in this issue. I'm pretty sure this issue only applies for some of them. -- Richard Levitte __ OpenSSL Proje

[openssl.org #448] [Fwd: Bug#176062: openssl: Expired certificates and recertification]

2003-01-13 Thread Richard Levitte via RT
[[EMAIL PROTECTED] - Fri Jan 10 15:09:40 2003]: It's correct, recertification doesn't work very well. A change would however mean making a substantial change to the database (index.txt), which makes it too complicated to get into the 0.9.7 branch. I'm planning to work on changing this behavio

[openssl.org #453] Re: DJGPP patch for 0.9.7-stable

2003-01-13 Thread Richard Levitte via RT
[[EMAIL PROTECTED] - Sun Jan 12 23:00:22 2003]: > On Sun, 12 Jan 2003, Andy Polyakov wrote: > > > > dkaufman> I noticed that the makefile contains a special line for > > > dkaufman> DJGPP, similar to the one for Cygwin. This isn't needed for > > > dkaufman> DJGPP. Patch attached. > > > > > > Pl

Re: AW: [openssl.org #450] openssl-0.9.7 not building with ncr-scde

2003-01-13 Thread Tim Rice
On Mon, 13 Jan 2003, Megele, Martin wrote: > > On Fri, 10 Jan 2003, Tim Rice wrote: > > > On Fri, 10 Jan 2003, Megele, Martin via RT wrote: > > > > > > > Undefined first referenced > > > > symbol in file > > > > strcasecmp

Re: [openssl.org #456] openssl 0.9.7, bug in ui_lib.c:general_allocate_string

2003-01-13 Thread Richard Levitte - VMS Whacker via RT
In message <[EMAIL PROTECTED]> on Mon, 13 Jan 2003 15:40:26 +0100 (MET), "Jacques A. Vidrine via RT" <[EMAIL PROTECTED]> said: rt> UI_add_input_string rt> Comment says `Returns the index to the place in the stack or 0 for rt> error.' --> zero for error Ah, that comment is in

Re: [openssl.org #456] openssl 0.9.7, bug inui_lib.c:general_allocate_string

2003-01-13 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 13 Jan 2003 15:40:26 +0100 (MET), "Jacques A. Vidrine via RT" <[EMAIL PROTECTED]> said: rt> UI_add_input_string rt> Comment says `Returns the index to the place in the stack or 0 for rt> error.' --> zero for error Ah, that comment is inc

Re: [ANNOUNCE] OpenSSL 0.9.7 released

2003-01-13 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 13 Jan 2003 15:36:40 +0100, Corinna Vinschen <[EMAIL PROTECTED]> said: vinschen> in the meantime I released Cygwin's openssl using the above vinschen> packaging scheme. Would you mind to revert the cygwin.sh vinschen> changes? The following patch should do

Re: [openssl.org #456] openssl 0.9.7, bug in ui_lib.c:general_allocate_string

2003-01-13 Thread Jacques A. Vidrine via RT
On Mon, Jan 13, 2003 at 03:16:46PM +0100, Richard Levitte via RT wrote: > > Hello, > > Thanks for the report. Unfortunately, your conclusions are > incorrect. The functions that you spotted in ui_lib.c return the > expected values, it's UI_UTIL_read_pw() that interprets those values > incorrectl

Re: [ANNOUNCE] OpenSSL 0.9.7 released

2003-01-13 Thread Corinna Vinschen
On Fri, Jan 10, 2003 at 07:27:35PM +0100, Corinna Vinschen wrote: > > [...] > Hi, I have chosen another packaging method: > > Version 0.9.6h will consist only of the needed DLLs to link applications > build against it. > > The package will be called > > openssl096-0.9.6h-1.tar.bz2 > >

[openssl.org #456] openssl 0.9.7, bug in ui_lib.c:general_allocate_string

2003-01-13 Thread Richard Levitte via RT
Hello, Thanks for the report. Unfortunately, your conclusions are incorrect. The functions that you spotted in ui_lib.c return the expected values, it's UI_UTIL_read_pw() that interprets those values incorrectly. I'm committing a change that should fix this. Please try tomorrows snapshot.

AW: [openssl.org #450] openssl-0.9.7 not building with ncr-scde

2003-01-13 Thread Megele, Martin
> On Fri, 10 Jan 2003, Tim Rice wrote: > > On Fri, 10 Jan 2003, Megele, Martin via RT wrote: > > > > > Undefined first referenced > > > symbol in file > > > strcasecmp ca.o > > > > Try adding -lresolv > > > > > ftime

Re: [openssl.org #433] 0.9.7 compilation problem with Borland C++ 5.5

2003-01-13 Thread [EMAIL PROTECTED] via RT
> > [[EMAIL PROTECTED] - Fri Jan 3 06:45:12 2003]: > > > > > I'm trying to compile 0.9.7 with Borland C++ 5.5 and NASM 0.98.35 on > > > Windows XP Professional SP1 with all updates. > > > > > > .\crypto\x509\x_all.c: > > > Error E2450 .\crypto\x509\x_all.c 72: Undefined structure > > 'AS

Re: [openssl.org #433] 0.9.7 compilation problem with Borland C++5.5

2003-01-13 Thread Jon Bright
> > [[EMAIL PROTECTED] - Fri Jan 3 06:45:12 2003]: > > > > > I'm trying to compile 0.9.7 with Borland C++ 5.5 and NASM 0.98.35 on > > > Windows XP Professional SP1 with all updates. > > > > > > .\crypto\x509\x_all.c: > > > Error E2450 .\crypto\x509\x_all.c 72: Undefined structure > > 'ASN

Re: [openssl.org #455] [BUG] FreeBSD openssl-0.9.7 I386_ONLY

2003-01-13 Thread Andy Polyakov via RT
> > > (cd asm; /usr/local/bin/perl des-586.pl cpp >dx86unix.cpp) > > > gcc -E -DOUT asm/dx86unix.cpp | as -o asm/dx86-out.o > > > des-586.s: Assembler messages: > > > des-586.s:2458: Error: Unimplemented segment type 0 in parse_operand > > > des-586.s:2645: Error: Unimplemented segment type 0 in p

[openssl.org #456] openssl 0.9.7, bug in ui_lib.c:general_allocate_string

2003-01-13 Thread Jacques A. Vidrine via RT
[ Sorry if you see this twice. I missed the existence of the RT alias before sending this to openssl-dev earlier. ] Hello, Regarding openssl 0.9.7: When using OPENSSL_DES_LIBDES_COMPATIBILITY, I noticed that `des_read_pw_string' was not functioning. I tracked this down to a bug in crypto/ui