Re: Still a few issues. Release delayed...

2005-06-29 Thread Tim Rice
On Tue, 28 Jun 2005, Richard Levitte - VMS Whacker wrote: Hi, The release is delayed again. There are a couple of issues that I think need to be checked. I hope we'll be through with this in a week. Things are looking much better here. The Makefile changes (make depend) are working on my

Re: Missing documentation

2005-06-29 Thread Goetz Babin-Ebell
Richard Levitte - VMS Whacker wrote: In message [EMAIL PROTECTED] on Wed, 29 Jun 2005 06:42:59 +0200, Karsten Ohme [EMAIL PROTECTED] said: widerstand will there be some day, when the the OpenSSL source code widerstand is documented in a some way? In all source files, widerstand explanations to

Re: [openssl.org #1105] DTLS HelloVerifyRequest PATCH

2005-06-29 Thread [EMAIL PROTECTED] via RT
So the bug report can be removed, right? Yes, the report can be removed. It is not a bug. (and *please* keep [EMAIL PROTECTED] among the recipients. It's quite hard to follow history in the database when people keep skipping that address) Apologies. nagendra

[openssl.org #1105] DTLS HelloVerifyRequest PATCH

2005-06-29 Thread Richard Levitte via RT
[EMAIL PROTECTED] - Wed Jun 29 17:43:06 2005]: So the bug report can be removed, right? Yes, the report can be removed. It is not a bug. Thanks. Ticket resolved. -- Richard Levitte [EMAIL PROTECTED] __ OpenSSL Project

Re: compiler error

2005-06-29 Thread Dr. Stephen Henson
On Mon, Jun 27, 2005, Jrgen Hovland wrote: Hi Does anyone know what to do with this? Im trying to compile a masm version. Thank you. cl /Fotmp32dll\ec_asn1.obj -Iinc32 -Itmp32dll /MD /W3 /WX /G5 /Ox /O2 / Ob2 /Gs0 /GF /Gy /nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_MEAN

Considering SSL and Cryto libraries for LSB

2005-06-29 Thread Banginwar, Rajesh
We recently started looking at some of Desktop specific libraries for including them as part of next LSB (Linux Standard Base www.linuxbase.org) release. This is part of the effort in the newly formed Desktop working group in LSB to focus on the Desktop Linux applications. As a part of this

RE: Considering SSL and Cryto libraries for LSB

2005-06-29 Thread Banginwar, Rajesh
As part of LSB standardization process, we look at the interfaces and corresponding data types and make it part of the specification. If the data types are expected to change and the interfaces do not hide them, then that part of the library may not be a candidate for LSB. Given this, I am just

Re: Considering SSL and Cryto libraries for LSB

2005-06-29 Thread Dr. Stephen Henson
On Wed, Jun 29, 2005, Banginwar, Rajesh wrote: As part of LSB standardization process, we look at the interfaces and corresponding data types and make it part of the specification. If the data types are expected to change and the interfaces do not hide them, then that part of the library may

[openssl.org #1143] pkg-config files for each lib

2005-06-29 Thread via RT
with the single openssl.pc pkg-config file we can only link witl -lcrypto -lssl -ldl. it would be better to provide a libcrypto.pc and a libssl.pc so we can create apps and libs, that link with libcrypto only. __ OpenSSL

Re: Considering SSL and Cryto libraries for LSB

2005-06-29 Thread Peter Waltenberg
IBM has already done this in creating it's FIPS certified crypto. code which is layered on top of OpenSSL. In our case we can guarantee that IBM code only uses our restricted subset of the OpenSSL API. Unfortunately you'll need to support the older API's to support legacy applications and in

Re: Considering SSL and Cryto libraries for LSB

2005-06-29 Thread Dan Nuffer
Dr. Stephen Henson wrote: This means that changing this in the short term is likely to cause widespread application breakage which wouldn't be too popular :-( Speaking as an application developer, I would willingly go through a one-time source code upgrade to achieve binary compatiblity.

Re: Considering SSL and Cryto libraries for LSB

2005-06-29 Thread Dr. Stephen Henson
On Thu, Jun 30, 2005, Peter Waltenberg wrote: IBM has already done this in creating it's FIPS certified crypto. code which is layered on top of OpenSSL. In our case we can guarantee that IBM code only uses our restricted subset of the OpenSSL API. Unfortunately you'll need to support the

Re: Considering SSL and Cryto libraries for LSB

2005-06-29 Thread Dr. Stephen Henson
On Wed, Jun 29, 2005, Dan Nuffer wrote: Dr. Stephen Henson wrote: This means that changing this in the short term is likely to cause widespread application breakage which wouldn't be too popular :-( Speaking as an application developer, I would willingly go through a one-time source

Re: Considering SSL and Cryto libraries for LSB

2005-06-29 Thread Geoff Thorpe
On June 29, 2005 05:50 pm, Banginwar, Rajesh wrote: As part of LSB standardization process, we look at the interfaces and corresponding data types and make it part of the specification. If the data types are expected to change and the interfaces do not hide them, then that part of the library

RE: Considering SSL and Cryto libraries for LSB

2005-06-29 Thread Banginwar, Rajesh
-Original Message- From: Geoff Thorpe [mailto:[EMAIL PROTECTED] On Behalf Of Geoff Thorpe Sent: Wednesday, June 29, 2005 5:45 PM To: openssl-dev@openssl.org Cc: Banginwar, Rajesh Subject: Re: Considering SSL and Cryto libraries for LSB On June 29, 2005 05:50 pm, Banginwar,

Re: Considering SSL and Cryto libraries for LSB

2005-06-29 Thread Geoff Thorpe
On June 29, 2005 08:44 pm, Banginwar, Rajesh wrote: So far from the preliminary analysis that we have done (by looking at some of the OSS applications) we see both libssl and libcrypto being used. E.g. from libcrypto I find functions in EVP, RSA, MD5 and DSA sets more commonly used than

RE: windows ce port patches

2005-06-29 Thread Steven Reddie
Hi Frank, I've got a lot going on right now, meaning that I don't have time to look at this in detail. Generally speaking though, the goal of wcecompat was to fill the gap between what the Windows CE C Runtime Library offered and what a full ANSI/Posix Runtime Library should offer. Time

Re: Considering SSL and Cryto libraries for LSB

2005-06-29 Thread Richard Levitte - VMS Whacker
In message [EMAIL PROTECTED] on Wed, 29 Jun 2005 17:44:38 -0700, Banginwar, Rajesh [EMAIL PROTECTED] said: rajesh.banginwar Do you or anyone on this project have data rajesh.banginwar suggesting which APIs are candidates for LSB rajesh.banginwar inclusion both from demand and stability point of

RE: windows ce port patches

2005-06-29 Thread Steven Reddie
Yes, simple casting isn't going to result in much other that emergency foot surgery. It's been some time since I did any WinCE work, but I seem to recall that there is only the W variant of most functions on Windows CE. Windows CE, if my memory is correct, is Unicode-only. The original patches

Re: make test still failing

2005-06-29 Thread Rodney Thayer
Richard Levitte - VMS Whacker wrote: In message [EMAIL PROTECTED] on Tue, 28 Jun 2005 09:29:54 -0700, Rodney Thayer [EMAIL PROTECTED] said: rodney 'make test' never works. in the EC test, it runs a long time rodney (tracing the output gives multiple gigabytes of text, it seems rodney to take

Re: Considering SSL and Cryto libraries for LSB

2005-06-29 Thread Dan Kegel
Richard Levitte - VMS Whacker wrote: Quite honestly, even though I'm quite an enthusiastic OpenSSL developer for years and have been for years (since it started, really), I can't really recommend OpenSSL as an LSB candidate from that point of view, as it stands today. Every major upgrade (which

Re: [openssl.org #1114] Bug: RC4 on IA64 and OpenSSH

2005-06-29 Thread Damien Miller
Andy Polyakov via RT wrote: Summary can be found at http://cvs.openssl.org/chngview?cn=14145. Point is that I assumed that RC4_KEY structure initialized by RC4_set_key is passed down to RC4 verbatim in its original memory location, while OpenSSH takes freedom to swap the structures initialized

RE: Considering SSL and Cryto libraries for LSB

2005-06-29 Thread Rich Salz
What is the benefit of adding parts of OpenSSL to the LSB now? -- Rich Salz Chief Security Architect DataPower Technology http://www.datapower.com XS40 XML Security Gateway http://www.datapower.com/products/xs40.html

Re: Considering SSL and Cryto libraries for LSB

2005-06-29 Thread Richard Levitte - VMS Whacker
In message [EMAIL PROTECTED] on Wed, 29 Jun 2005 22:05:07 -0700, Dan Kegel [EMAIL PROTECTED] said: dank http://www.gnu.org/software/gnutls/ dank exposes two APIs: the OpenSSL api (I gather?), and its own. About the OpenSSL API, this page answers part of the question.