[openssl.org #731] Patch for Makefile.org and openssl.spec for /usr/lib/pkgconfig mode

2003-11-21 Thread Lutz Jaenicke via RT
[EMAIL PROTECTED] - Mon Oct 13 09:24:50 2003]: How do you do? I found it is impossible to create RPM packages of Openssl 0.9.7c with the openssl.spec in the source archive. There is an failure in Makefile.org. Mode of directory /usr/lib/pkgconfig is set to 0644. Thanks. The bug has

Re: Verification of cert w/o keyCertSign

2003-11-21 Thread Dave Roberts
On Thu, 20 Nov 2003, Dr. Stephen Henson wrote: Cert1 has keyUsage keyCertSign set. Its issuer and subject names are identical. Cert2 includes keyUsage and does *not* have keyCertSign set. Its issuer and subject names are identical *and* identical to Cert1. The two certificates have

Re: Verification of cert w/o keyCertSign

2003-11-21 Thread Dr. Stephen Henson
On Fri, Nov 21, 2003, Dave Roberts wrote: On Thu, 20 Nov 2003, Dr. Stephen Henson wrote: Cert1 has keyUsage keyCertSign set. Its issuer and subject names are identical. Cert2 includes keyUsage and does *not* have keyCertSign set. Its issuer and subject names are identical *and*

[openssl.org #726] bug report, help request...

2003-11-21 Thread Lutz Jaenicke via RT
[EMAIL PROTECTED] - Mon Oct 6 17:08:31 2003]: While running the make command to build version 9.7c, I get the following errors. My system is OpenBSD i386. Please help me fix this bug, if it is in fact a bug with OpenSSL ... des-586.s:2458: Error: Unimplemented segment type 151680 in

[openssl.org #725] compile error on SunOS 4.1.4

2003-11-21 Thread Lutz Jaenicke via RT
[EMAIL PROTECTED] - Mon Oct 6 17:05:28 2003]: Hi, while upgrading to 0.9.7c on my old SunOS 4.1.4 box I am getting the following error: | making all in test... | if [ = hpux-shared -o = darwin-shared ] ; then \ | gcc -o destest -I.. -I../include -DOPENSSL_SYSNAME_SUNOS

Re: Verification of cert w/o keyCertSign

2003-11-21 Thread Dave Roberts
On Fri, 21 Nov 2003, Dr. Stephen Henson wrote: Well yes except there's a broken certificate workaround in there... One rather important CA excludes basicConstraints in its CA certificate but includes keyUsage+keyCertSign so it will tolerate this case. Very broken certificate. Rather than

Re: Stalling hardware randomness a possible problem.

2003-11-21 Thread Geoff Thorpe
On November 20, 2003 08:49 pm, Richard Levitte - VMS Whacker wrote: I think piggy-backing would be the best approach. At this point, I'm seriously messing the function pointer int (*poll)(void) in RAND_METHOD (I can add it to 0.9.8-dev, but I think we need to do something for 0.9.7-stable as

Re: Stalling hardware randomness a possible problem.

2003-11-21 Thread Richard Levitte - VMS Whacker
In message [EMAIL PROTECTED] on Fri, 21 Nov 2003 17:07:25 -0500, Geoff Thorpe [EMAIL PROTECTED] said: geoff For 0.9.7-stable, I suggest the following hack: geoff geoff have hwcrhk_rand_bytes and hwcrhk_rand_status check a static variable geoff (initilized to 0), and if it's 0, they will grab

Re: Stalling hardware randomness a possible problem.

2003-11-21 Thread Richard Levitte - VMS Whacker
In message [EMAIL PROTECTED] on Fri, 21 Nov 2003 17:47:45 -0500, Geoff Thorpe [EMAIL PROTECTED] said: geoff On November 21, 2003 05:29 pm, Richard Levitte - VMS Whacker wrote: geoff An option that leaves the decision right back into the hands of the geoff user would be to have an extra

[openssl.org #775]

2003-11-21 Thread via RT
tst __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]