[openssl.org #1984] [PATCH]: DTLS: ssl3_read_n() concatenates UDP datagrams in DTLS case

2009-07-09 Thread Daniel Mentz via RT
ssl3_read_n() was conceived to read blocks of data from a byte oriented stream. This can be easily explained by an example: You call ssl3_read_n() with the a parameter like Read 50 bytes of data. As opposed to the read() function provided by the OS, ssl3_read_n() makes sure you really get 50

Re: [openssl.org #1984][PATCH]: DTLS: ssl3_read_n() concatenates UDP datagrams in DTLS case

2009-07-09 Thread Michael Tuexen via RT
Dear all, I agree with Daniel that reading a record from multiple UDP packets is a bug. I need some time to figure out if the proposed fix is the right one. Robin is on holiday for two weeks. Best regards Michael On Jul 8, 2009, at 10:15 PM, Daniel Mentz wrote: ssl3_read_n() was conceived to

[openssl.org #1985] [patch] uninitialized value in a_time.c

2009-07-09 Thread Artem Chuprina via RT
Uninitialized t.flags value in the ASN1_TIME_set_string function may lead (and usually leads in ca subcommand on linux) to memory leaks. Other possible issues are unknown to me. The following patch (against OpenSSL_1_0_0-stable branch as of 2009.07.09) fixes the problem. Index:

[openssl.org #1984] [PATCH]: DTLS: ssl3_read_n() concatenates UDP datagrams in DTLS case

2009-07-09 Thread Michael Tuexen via RT
Dear all, I have looked at the patch provided by Daniel. All suggested changes are OK, but there are two additional things which should be fixed: 1. In ssl3_read_n() the argument max is overwritten before used. 2. If additional data is behind a valid DTLS record in the UDP packet, it is

EVP_md2 error

2009-07-09 Thread The Doctor
Show stopper in php-5.2.8 + ext/openssl/.libs/openssl.o: In function `php_openssl_get_evp_md_from_algo': /usr/source/php-5.3.0/ext/openssl/openssl.c:908: undefined reference to `EVP_md2' Can this call be restored? -- Member - Liberal International This is