[openssl.org #3448] Overflow

2014-07-10 Thread Chaney, Benjamin via RT
Hello, I have been looking at the OpenSSL source code, and this jumped out as a possible error. 'n¹ is an unsigned before it is passed into ssl3_read_n, which causes the worry of an overflow. To prevent this, I added check that just makes sure that n is not less than zero, which wouldn't

Re: [openssl.org #3448] Overflow

2014-07-10 Thread Otto Moerbeek
On Thu, Jul 10, 2014 at 11:26:46AM +0200, Chaney, Benjamin via RT wrote: Hello, I have been looking at the OpenSSL source code, and this jumped out as a possible error. 'n?? is an unsigned before it is passed into ssl3_read_n, which causes the worry of an overflow. To prevent this, I

[openssl.org #3441] bug report - RAND_cleanup in apps_shutdown problem

2014-07-10 Thread Matt Caswell via RT
Running the applications in this way is not supported. Closing this ticket. Matt __ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org

[openssl.org #3449] [BUG] DTLS: ECC extensions not sent (1.0.1h)

2014-07-10 Thread Manuel Pégourié-Gonnard via RT
Hi, Using OpenSSL 1.0.1h 5 Jun 2014, a DTLS client can't negotiate ECC-based ciphersuites with a compliant DTLS server since it fails to send the relevant extensions mandated by RFC 4492. % openssl s_client -dtls1 -debug CONNECTED(0003) write to 0x1761c50 [0x176c160] (166 bytes = 166 (0xA6))

Re: [openssl.org #3449] AutoReply: [BUG] DTLS: ECC extensions not sent (1.0.1h)

2014-07-10 Thread Manuel Pégourié-Gonnard via RT
On 10/07/2014 21:28, The default queue via RT wrote: Everything works fine if -dtls1_1 is used instead of -dtls1. Err, I meant works with -tls1_1 (TLS) instead of -dtls (DTLS). Manuel. __ OpenSSL Project

[openssl.org #3442] [patch] AES XTS: supporting custom iv from openssl enc command

2014-07-10 Thread Matt Caswell via RT
On Wed Jul 09 16:24:04 2014, lull...@yahoo.com wrote: Hi, openssl enc command with -aes-xxx-xts doesnt work if an IV is specified When you say it doesn't work, what do you mean? Do you get an error? If so what is it? as below: openssl enc -engine af_alg -aes-256-xts -in plaintext_file

[openssl.org #3448] Overflow

2014-07-10 Thread Matt Caswell via RT
On Thu Jul 10 11:26:46 2014, bcha...@akamai.com wrote: Hello, I have been looking at the OpenSSL source code, and this jumped out as a possible error. 'n¹ is an unsigned before it is passed into ssl3_read_n, which causes the worry of an overflow. To prevent this, I added check that just makes