Re: [openssl-dev] [openssl.org #4343] master: EC_KEY_priv2buf (): check parameter sanity

2016-02-27 Thread Viktor Dukhovni
> On Feb 27, 2016, at 7:42 PM, Jeffrey Walton wrote: > > Please ensure this is documented somewhere. I'm having trouble finding > information on the new rules. > > There's 15 or 20 years of using capitol and lower case identifiers to > denote public and private APIs with OpenSSL. For example, s

Re: [openssl-dev] [openssl.org #4343] master: EC_KEY_priv2buf (): check parameter sanity

2016-02-27 Thread Jeffrey Walton
>> Correct me if I am wrong... API's that start with capitol letters are >> public. Private interfaces use lowercase letters. >> Documented/undocumented does not really factor things. > > You're wrong. Once OpenSSL's past sins are remediated, public > interfaces are precisely those that are docume

[openssl-dev] [openssl.org #4354] PATCH: cross reference SSL_CTX_set_client_CA_list in SSL_CTX_use_certificate and SSL_CTX_load_verify_locations man pages

2016-02-27 Thread Rich Salz via RT
commit e0b5108; thanks. -- Rich Salz, OpenSSL dev team; rs...@openssl.org -- Ticket here: http://rt.openssl.org/Ticket/Display.html?id=4354 Please log in as guest with password guest if prompted -- openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

[openssl-dev] [openssl.org #4354] PATCH: cross reference SSL_CTX_set_client_CA_list in SSL_CTX_use_certificate and SSL_CTX_load_verify_locations man pages

2016-02-27 Thread noloa...@gmail.com via RT
Stack Overflow has a number of questions related to mutual authentication, the client and its certificate. Those visiting the man pages for functions like SSL_CTX_use_certificate and SSL_CTX_load_verify_locations don't receive the benefit of a cross reference to SSL_CTX_set_client_CA_list. This pa

[openssl-dev] [openssl.org #2275] CVS HEAD: BIO b_sock: ioctl(FIONBIO) is not available everywhere; completed BIO_socket_nbio() so the #ifdef clutter in apps/* and other spots can be discarded after t

2016-02-27 Thread Rich Salz via RT
and the apps are converted to use that function (BIO_sock_nbio) , so fully closing this :) -- Rich Salz, OpenSSL dev team; rs...@openssl.org -- Ticket here: http://rt.openssl.org/Ticket/Display.html?id=2275 Please log in as guest with password guest if prompted -- openssl-dev mailing list To un

Re: [openssl-dev] [openssl.org #4353] openssl-1.0.2f dependency error

2016-02-27 Thread Kiyoshi KANAZAWA via RT
Hmm... % make libcrypto.so.1.0.0 libssl.so.1.0.0 always remakes them. It is better to change Makefile in top, but too complicated for me. Easier sample patch is as follows. diff -cr ../openssl-1.0.2f.orig/crypto/Makefile ./crypto/Makefile *** ../openssl-1.0.2f.orig/crypto/Makefile  2016-01-28 2

[openssl-dev] [openssl.org #4353] openssl-1.0.2f dependency error

2016-02-27 Thread Kiyoshi KANAZAWA via RT
Hmm... % make libcrypto.so.1.0.0 libssl.so.1.0.0 always remakes them. It is better to change Makefile in top, but too complicated for me. Easier sample patch is as follows. diff -cr ../openssl-1.0.2f.orig/crypto/Makefile ./crypto/Makefile *** ../openssl-1.0.2f.orig/crypto/Makefile  2016-01-28 2

[openssl-dev] [openssl.org #4353] openssl-1.0.2f dependency error

2016-02-27 Thread Kiyoshi KANAZAWA via RT
There are dependency error in Makefile(s). SHARED_LIBS are checked in . but make will be run in .. crypto/Makefile:    108  shared: buildinf.h lib subdirs    109  if [ -n "$(SHARED_LIBS)" ]; then \    110  (cd ..; $(MAKE) $(SHARED_LIB)); \    111  fi ssl/Makefile:     63  shared:

Re: [openssl-dev] [openssl.org #4352] Failed test 'Duplicate ClientHello extension' when testing under Clang undefined behavior sanitizer

2016-02-27 Thread Kurt Roeckx via RT
On Sat, Feb 27, 2016 at 01:58:26AM +, noloa...@gmail.com via RT wrote: > Platform is Linux, x86_64. The failure occurs under Clang with the > sanitizer. GCC is fine. > > I'm guessing the error output from the Undefined Behavior sanitizer is > causing the test to be interpreted as a fail. It h