Re: [openssl.org #3428] bug report : crypto/des/ofb64enc.c: Uninitialized variable: d

2014-07-04 Thread Otto Moerbeek
On Thu, Jul 03, 2014 at 11:35:15PM +0200, Kurt Roeckx wrote: On Thu, Jul 03, 2014 at 09:28:47PM +0100, Ben Laurie wrote: On 3 July 2014 20:06, Kurt Roeckx via RT r...@openssl.org wrote: On Thu, Jul 03, 2014 at 07:51:28PM +0200, Toralf F?rster via RT wrote: I think cppcheck is right here

Re: [openssl.org #3428] bug report : crypto/des/ofb64enc.c: Uninitialized variable: d

2014-07-04 Thread Kurt Roeckx
On Fri, Jul 04, 2014 at 08:21:15AM +0200, Otto Moerbeek wrote: On Thu, Jul 03, 2014 at 11:35:15PM +0200, Kurt Roeckx wrote: On Thu, Jul 03, 2014 at 09:28:47PM +0100, Ben Laurie wrote: On 3 July 2014 20:06, Kurt Roeckx via RT r...@openssl.org wrote: On Thu, Jul 03, 2014 at 07:51:28PM

[openssl.org #2770] updated cryptodev fix

2014-07-04 Thread Nikos Mavrogiannopoulos via RT
From fa47376f4c3e03b18ccd52df53d8c5041155d4ed Mon Sep 17 00:00:00 2001 From: Nikos Mavrogiannopoulos n...@gnutls.org Date: Fri, 4 Jul 2014 07:31:25 +0200 Subject: [PATCH] cryptodev: Fix issue with signature generation That patch also enables support for SHA2 hashes, and removes support for

Re: [openssl.org #3415] Bug report: Uninitialized memory reads reported by valgrind for ECDSA signatures

2014-07-04 Thread Tomas Mraz via RT
On Čt, 2014-07-03 at 23:47 +0200, Matt Caswell via RT wrote: I've put together a fix (see below), but not pushed it because I was working on the assumption that if you had PURIFY defined then you wouldn't care about constant time operation. I've since been told that possibly some distros

Re: Website Contribution

2014-07-04 Thread Allan Clark
Hi; I'm a big fan of static pages. They cache easily. They can run from a local disk. What are your thoughts on Doxygen? Allan -- misspelled on my iDevice ; +1-424-242-2668 On Jul 3, 2014, at 11:55, Michael \Croydon\ K. g...@rvapps.org wrote: Of course WML is just a tool which generates

[openssl.org #3429] PATCH: Update to X509_check_host documentation

2014-07-04 Thread noloa...@gmail.com via RT
Viktor graciously took the time to explain some of the finer details of the new name matching API (see http://www.mail-archive.com/openssl-users@openssl.org/msg74281.html). The discussion was helpful to me, and would likely be helpful to others. The patch incorporates Viktor's comments, and

[openssl.org #3430] ssltest fails when using -DTEMP_GOST_TLS

2014-07-04 Thread Support via RT
Hi, when I compile using the -DTEMP_GOST_TLS flag and the enable-GOST flag openssl compiles succesfully. The ssltest fails however. This happens on the current (04-07-2014) master branch, as well as the current (04-07-2014) OpenSSL_1_0_2-stable branch (the only branches I have tested so far with

[openssl.org #3431] typo (?) in crypto/sha/asm/sha512-x86_64.pl

2014-07-04 Thread Support via RT
Hi, As of 04-07-2014, the latest version of crypto/sha/asm/sha512-x86_64.pl (commit 29be3f6411) in the master branch shows the following at line 2309: $code.=___ if ($SZ==4 $shext); Seeing that the variable $shext doesn't exist, but $shaext does, this might be a typo. Please find a

Re: [openssl.org #3428] bug report : crypto/des/ofb64enc.c: Uninitialized variable: d

2014-07-04 Thread Ben Laurie
On 3 July 2014 22:35, Kurt Roeckx k...@roeckx.be wrote: On Thu, Jul 03, 2014 at 09:28:47PM +0100, Ben Laurie wrote: On 3 July 2014 20:06, Kurt Roeckx via RT r...@openssl.org wrote: On Thu, Jul 03, 2014 at 07:51:28PM +0200, Toralf Förster via RT wrote: I think cppcheck is right here in void

Re: [openssl.org #3428] bug report : crypto/des/ofb64enc.c: Uninitialized variable: d

2014-07-04 Thread Ben Laurie
It'd be nice, btw, if someone would report the bug to cppcheck. On 4 July 2014 10:15, Ben Laurie b...@links.org wrote: On 3 July 2014 22:35, Kurt Roeckx k...@roeckx.be wrote: On Thu, Jul 03, 2014 at 09:28:47PM +0100, Ben Laurie wrote: On 3 July 2014 20:06, Kurt Roeckx via RT r...@openssl.org

Re: [PATCH] LibReSSL/OpenSSL: Adjust/remove keysize restrictions

2014-07-04 Thread Hubert Kario
- Original Message - From: Wilfried Klaebe w+...@chaos.in-kiel.de To: openssl-dev@openssl.org Sent: Thursday, 3 July, 2014 11:42:08 PM Subject: Re: [PATCH] LibReSSL/OpenSSL: Adjust/remove keysize restrictions Am Thu, Jul 03, 2014 at 07:20:46PM +0200 schrieb Kurt Roeckx: On Thu,

Preventing the next Heartbleed

2014-07-04 Thread Ben Laurie
Interesting paper by David Wheeler: http://www.dwheeler.com/essays/heartbleed.html. __ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org

Re: [openssl.org #3428] bug report : crypto/des/ofb64enc.c: Uninitialized variable: d

2014-07-04 Thread Otto Moerbeek
On Fri, Jul 04, 2014 at 08:38:23AM +0200, Kurt Roeckx wrote: On Fri, Jul 04, 2014 at 08:21:15AM +0200, Otto Moerbeek wrote: On Thu, Jul 03, 2014 at 11:35:15PM +0200, Kurt Roeckx wrote: On Thu, Jul 03, 2014 at 09:28:47PM +0100, Ben Laurie wrote: On 3 July 2014 20:06, Kurt Roeckx via

[openssl.org #3432]

2014-07-04 Thread Bodo Moeller via RT
__ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager majord...@openssl.org

Re: [openssl.org #3430] ssltest fails when using -DTEMP_GOST_TLS

2014-07-04 Thread Andrey Kulikov
when I compile using the -DTEMP_GOST_TLS flag What the reason to do it? GOST TLS (at least that one what works) do not require this to be defined.

Re: [PATCH] LibReSSL/OpenSSL: Adjust/remove keysize restrictions

2014-07-04 Thread Benny Baumann
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi Kurt, Am 04.07.2014 00:41, schrieb Kurt Roeckx: On Thu, Jul 03, 2014 at 11:42:08PM +0200, Wilfried Klaebe wrote: Am Thu, Jul 03, 2014 at 07:20:46PM +0200 schrieb Kurt Roeckx: On Thu, Jul 03, 2014 at 08:08:52AM -0400, Hubert Kario wrote:

Re: [PATCH] LibReSSL/OpenSSL: Adjust/remove keysize restrictions

2014-07-04 Thread Hubert Kario
- Original Message - From: Benny Baumann be...@geshi.org To: openssl-dev@openssl.org Sent: Friday, July 4, 2014 10:28:07 AM Subject: Re: [PATCH] LibReSSL/OpenSSL: Adjust/remove keysize restrictions -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Am 03.07.2014 14:08, schrieb

Re: [openssl.org #3428] bug report : crypto/des/ofb64enc.c: Uninitialized variable: d

2014-07-04 Thread Toralf Förster
On 07/04/2014 11:17 AM, Ben Laurie wrote: It'd be nice, btw, if someone would report the bug to cppcheck. http://5.150.254.56:443/trac-cppcheck/ticket/5970#ticket Thx On 4 July 2014 10:15, Ben Laurie b...@links.org wrote: On 3 July 2014 22:35, Kurt Roeckx k...@roeckx.be wrote: On Thu, Jul

Re: Website Contribution

2014-07-04 Thread Dominyk Tiller
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Jekyll Sass are another two strong candidates IMO. Dom Sent from Thunderbird for OS X. My PGP public key is automatically attached to this email. On 03/07/2014 20:38, Allan Clark wrote: Hi; I'm a big fan of static pages. They cache easily.

Re: [openssl.org #3433] ESXi 4.1 SSL Patch

2014-07-04 Thread Kurt Roeckx via RT
On Fri, Jul 04, 2014 at 08:31:41PM +0200, Robin Kohler via RT wrote: Hi together I have an issue with the openssl version 0.9.8y. I would like to update the actually version 0.9.8y to 0.9.8.za, but I can't find any patches for an ESXi 4.1 Host. I installed a vmware patch, but the issue was

Re: [openssl.org #3428] bug report : crypto/des/ofb64enc.c: Uninitialized variable: d

2014-07-04 Thread Ben Laurie
On 4 July 2014 15:20, Toralf Förster toralf.foers...@gmx.de wrote: On 07/04/2014 11:17 AM, Ben Laurie wrote: It'd be nice, btw, if someone would report the bug to cppcheck. http://5.150.254.56:443/trac-cppcheck/ticket/5970#ticket Thanks. Thx On 4 July 2014 10:15, Ben Laurie b...@links.org

Re: [openssl.org #3429] AutoReply: PATCH: Update to X509_check_host documentation

2014-07-04 Thread Kurt Roeckx
On Fri, Jul 04, 2014 at 10:50:47PM +0200, noloa...@gmail.com via RT wrote: Updated text for the patch based on Viktor's reply to JW and JB on the list. The updted text includes the a statement that its not possible to determine which named matched (this may be added in the future); and the

Re: [openssl.org #3429] AutoReply: PATCH: Update to X509_check_host documentation

2014-07-04 Thread Viktor Dukhovni
On Sat, Jul 05, 2014 at 12:17:13AM +0200, Kurt Roeckx wrote: On Fri, Jul 04, 2014 at 10:50:47PM +0200, noloa...@gmail.com via RT wrote: Updated text for the patch based on Viktor's reply to JW and JB on the list. The updated text includes the a statement that its not possible to

Re: [openssl.org #3434] [PATCH] Add support for key wrapping mode with padding - RFC 5649

2014-07-04 Thread Viktor Dukhovni
On Fri, Jul 04, 2014 at 08:33:36PM +0200, Petr Spacek via RT wrote: I tried to fully describe purpose and implementation directly in the code comments. This is no substitute for documentation. This patchset introduces new libcrypto API elements, which need to be documented. Please squash