Re: need help to debug SIGSEGV in ssl3_get_message

2014-09-25 Thread Michael Menge
Marcus and Andy, thank you very much for your help so far. I have a few more questions, see below. Quoting Marcus Meissner meiss...@suse.de: On Wed, Sep 24, 2014 at 01:13:51PM +0200, Michael Menge wrote: Quoting Matt Caswell m...@openssl.org: On 24 September 2014 10:03, Michael Menge

Re: need help to debug SIGSEGV in ssl3_get_message

2014-09-25 Thread Andy Polyakov
in that case it crashes here: if (s-msg_callback) s-msg_callback(0, s-version, SSL3_RT_HANDSHAKE, s-init_buf-data, (size_t)s-init_num + 4, s, s-msg_callback_arg); So is the pointer to the callback wrong, or is the SIGSEGV in the called function? What happens if

Re: need help to debug SIGSEGV in ssl3_get_message

2014-09-25 Thread Michael Menge
Quoting Andy Polyakov ap...@openssl.org: in that case it crashes here: if (s-msg_callback) s-msg_callback(0, s-version, SSL3_RT_HANDSHAKE, s-init_buf-data, (size_t)s-init_num + 4, s, s-msg_callback_arg); So is the pointer to the callback wrong, or is the SIGSEGV in

Re: need help to debug SIGSEGV in ssl3_get_message

2014-09-25 Thread Martin Simmons
On Thu, 25 Sep 2014 11:24:36 +0200, Michael Menge said: Quoting Andy Polyakov ap...@openssl.org: in that case it crashes here: if (s-msg_callback) s-msg_callback(0, s-version, SSL3_RT_HANDSHAKE, s-init_buf-data, (size_t)s-init_num + 4, s,

Re: need help to debug SIGSEGV in ssl3_get_message

2014-09-25 Thread Michael Menge
Quoting Martin Simmons mar...@lispworks.com: On Thu, 25 Sep 2014 11:24:36 +0200, Michael Menge said: Quoting Andy Polyakov ap...@openssl.org: in that case it crashes here: if (s-msg_callback) s-msg_callback(0, s-version, SSL3_RT_HANDSHAKE, s-init_buf-data,

1.0.2 head doesn't build...

2014-09-25 Thread Ben Laurie
Workaround (I wasn't sure if the functions were intended to be used somewhere, so not deleted yet): diff --git a/crypto/constant_time_test.c b/crypto/constant_time_test.c index 1b4b18d..78e7fca 100644 --- a/crypto/constant_time_test.c +++ b/crypto/constant_time_test.c @@ -195,7 +195,7 @@ static

Re: need help to debug SIGSEGV in ssl3_get_message

2014-09-25 Thread Andy Polyakov
in that case it crashes here: if (s-msg_callback) s-msg_callback(0, s-version, SSL3_RT_HANDSHAKE, s-init_buf-data, (size_t)s-init_num + 4, s, s-msg_callback_arg); So is the pointer to the callback wrong, or is the SIGSEGV in the called function? What

Re: need help to debug SIGSEGV in ssl3_get_message

2014-09-25 Thread Marcus Meissner
On Thu, Sep 25, 2014 at 02:41:56PM +0200, Andy Polyakov wrote: in that case it crashes here: if (s-msg_callback) s-msg_callback(0, s-version, SSL3_RT_HANDSHAKE, s-init_buf-data, (size_t)s-init_num + 4, s, s-msg_callback_arg); So is the pointer to the

Re: [openssl.org #2187] winsock.h inclusion in dtls1.h (bug?)

2014-09-25 Thread Andy Polyakov
Hi, With this change: http://cvs.openssl.org/chngview?cn=18216 dtls1.h now includes winsock.h (instead of winsock2.h). This can cause conflicts with Winsock2 applications that include this header file (that have already included winsock2.h). This is a bit misleading and is not really true.

[openssl.org #3546] Remove IRIX_CC_BUG #ifdef's

2014-09-25 Thread Rich Salz via RT
Self-explanatory. __ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager

Platform removal

2014-09-25 Thread Salz, Rich
Starting with the next release after 1.0.2, we're planning on removing the following platforms from the codebase. NeXT NEWS SUNOS It looks like SUNOS can be handled by adding -Dssize_t=int as a compiler flag. For your information, we have already removed BEOS, MWERKS and pre-OSx Mac

OpenSSL version 1.0.2 beta 3 released

2014-09-25 Thread OpenSSL
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 1.0.2 beta 3 = OpenSSL - The Open Source toolkit for SSL/TLS http://www.openssl.org/ OpenSSL 1.0.2 is currently in beta. OpenSSL 1.0.2 beta 3 has now been released. For details of

答复: RE: [openssl.org #3534] When I build openssl-1.0.1i on Solaris 10, there are some error, please help to check what is the reason. Thanks.

2014-09-25 Thread yuan . bengang
Result as follow: -bash-3.00# wc -l md2test.c 0 md2test.c -bash-3.00# -bash-3.00# cat md2test.c dummytest.c-bash-3.00# -bash-3.00# ZTE Information Security Notice: The information contained in this mail (and any attachment

Re: 1.0.2 head doesn't build...

2014-09-25 Thread Emilia Käsper
Appears to be a bad git merge on my side. I'm on it. On Thu, Sep 25, 2014 at 1:23 PM, Ben Laurie b...@links.org wrote: Workaround (I wasn't sure if the functions were intended to be used somewhere, so not deleted yet): diff --git a/crypto/constant_time_test.c b/crypto/constant_time_test.c

Re: 1.0.2 head doesn't build...

2014-09-25 Thread Emilia Käsper
Fixed in fdc35a9d3e8cf4cfd9330d5df9883f42cf5648ad. Sorry about that, Emilia On Thu, Sep 25, 2014 at 1:28 PM, Emilia Käsper emi...@silkandcyanide.net wrote: Appears to be a bad git merge on my side. I'm on it. On Thu, Sep 25, 2014 at 1:23 PM, Ben Laurie b...@links.org wrote: Workaround (I

答复: [openssl.org #3534] When I build openssl-1.0.1i on Solaris 10, there are some error, please help to check what is the reason. Thanks.

2014-09-25 Thread yuan.beng...@zte.com.cn via RT
md2test.c has no problem, I downloaded from openssl.org: http://www.openssl.org/source/openssl-1.0.1i.tar.gz Thanks. Rich Salz via RT r...@openssl.org 2014-09-25 02:59 请答复 给 r...@openssl.org 收件人 yuan.beng...@zte.com.cn, 抄送 openssl-dev@openssl.org 主题 [openssl.org #3534] When I build

答复: RE: [openssl.org #3534] When I build openssl-1.0.1i on Solaris 10, there are some error, please help to check what is the reason. Thanks.

2014-09-25 Thread yuan.beng...@zte.com.cn via RT
Result as follow: -bash-3.00# wc -l md2test.c 0 md2test.c -bash-3.00# -bash-3.00# cat md2test.c dummytest.c-bash-3.00# -bash-3.00# ZTE Information Security Notice: The information contained in this mail (and any attachment

RE: RE: [openssl.org #3534] When I build openssl-1.0.1i on Solaris 10, there are some error, please help to check what is the reason. Thanks.

2014-09-25 Thread Salz, Rich
Somehow the file that you have is corrupted. It is not corrupted in the tar file. It is a local error. I do not know what the error is but mdtest.c on your disk is WRONG.

RE: RE: [openssl.org #3534] When I build openssl-1.0.1i on Solaris 10, there are some error, please help to check what is the reason. Thanks.

2014-09-25 Thread Salz, Rich via RT
Somehow the file that you have is corrupted. It is not corrupted in the tar file. It is a local error. I do not know what the error is but mdtest.c on your disk is WRONG. __ OpenSSL Project

RE: [openssl-dev] Adding GET support to ocsp app

2014-09-25 Thread Salz, Rich
I don't see where the OCSP request is de-base64-ified, and URL-decoded. In both cases, d2i_OCSP_REQUEST_bio is called to get the request, but it's done directly on the HTTP request line for a GET. I forgot to post the updated patch. Thanks Erwann. -- Principal Security Engineer, Akamai