Re: [openssl-dev] OpenSSL_1_0_2-stable Windows build

2016-08-22 Thread Richard Levitte
In message on Mon, 22 Aug 2016 19:35:35 +0100, Matt Caswell said: matt> matt> matt> On 22/08/16 18:12, John Foley wrote: matt> > Is anyone seeing the following error when building 1.0.2 stable on Windows: matt> > matt> >

Re: [openssl-dev] OpenSSL_1_0_2-stable Windows build

2016-08-22 Thread Matt Caswell
On 22/08/16 18:12, John Foley wrote: > Is anyone seeing the following error when building 1.0.2 stable on Windows: > > Creating library tmp32dll\junk.lib and object tmp32dll\junk.exp > IF EXIST out32dll\sslv2conftest.exe.manifest mt -nologo -manifest >

[openssl-dev] OpenSSL_1_0_2-stable Windows build

2016-08-22 Thread John Foley
Is anyone seeing the following error when building 1.0.2 stable on Windows: Creating library tmp32dll\junk.lib and object tmp32dll\junk.exp IF EXIST out32dll\sslv2conftest.exe.manifest mt -nologo -manifest out32dll\sslv2conftest.exe.manifest

[openssl-dev] [openssl.org #2676] 1.0.1-beta1 issue: RSA exponent 1 is NOT ok

2016-08-22 Thread Rich Salz via RT
This is fixed in 1.0.2 (commit 561530d) and master/1.1.0 (commit 464d59a). Thanks! -- Ticket here: http://rt.openssl.org/Ticket/Display.html?id=2676 Please log in as guest with password guest if prompted -- openssl-dev mailing list To unsubscribe:

Re: [openssl-dev] [openssl.org #4628] EVP_f_cipher regression due to overlapping regions check

2016-08-22 Thread David Benjamin via RT
I may not have time to fully digest the change before the release date, but I'm not sure this snippet quite works: if (ctx->read_start == ctx->read_end) { /* time to read more data */ ctx->read_end = ctx->read_start = &(ctx->buf[BUF_OFFSET]); ctx->read_end += BIO_read(next,

[openssl-dev] [openssl.org #4655] Openssl req seems not to work with precreated key

2016-08-22 Thread Richard Levitte via RT
All merged now, closing ticket. On Mon Aug 22 13:30:02 2016, levitte wrote: > Perfect. > > Fix has been merged into master, but I'll wait with closing this until > I get a > yay or nay about the corresponding 1.0.2 fix. > > Cheers, > Richard > > On Mon Aug 22 13:12:58 2016, beld...@gmail.com

[openssl-dev] [openssl.org #4657] Bug - SSL Library Error - BUF_MEM_grow:malloc failure

2016-08-22 Thread Nomalatha Aerampu via RT
Hi, Our product (32-bit process) uses OpenSSL third-party libraries for EAP protocols. During the debugging of a customer issue in PEAP protocol, we got to understand that SSL_Accept has returned failure. STATE_HANDSHAKE SSL_ERROR_SSL error retrun code [1] and peak error translate code [39]

[openssl-dev] [openssl.org #4656] [BUG] print_bin could access memory off the end of a buffer

2016-08-22 Thread Perrow, Graeme via RT
In file crypto/ec/eck_prn.c, if the function print_bin is called with len >= 15 and off >= 124, we would eventually hit line 261: memset( &(str[1]), ' ', off + 4 ); which would write >= 128 bytes into a 127-byte buffer. -- Ticket here: http://rt.openssl.org/Ticket/Display.html?id=4656

[openssl-dev] [openssl.org #4655] Openssl req seems not to work with precreated key

2016-08-22 Thread Richard Levitte via RT
Perfect. Fix has been merged into master, but I'll wait with closing this until I get a yay or nay about the corresponding 1.0.2 fix. Cheers, Richard On Mon Aug 22 13:12:58 2016, beld...@gmail.com wrote: > Dear Richard, > > Thank you, it works. > > On Mon, Aug 22, 2016 at 4:00 PM, Richard

Re: [openssl-dev] [openssl.org #4655] Openssl req seems not to work with precreated key

2016-08-22 Thread Dmitry Belyavsky via RT
Dear Richard, Thank you, it works. On Mon, Aug 22, 2016 at 4:00 PM, Richard Levitte via RT wrote: > The issue isn't with the pre-created key, but because '-x509' doesn't fully > flag that something new is to be created. The freeze is because 'openssl > req' > tries to read a

Re: [openssl-dev] [openssl.org #4655] Openssl req seems not to work with precreated key

2016-08-22 Thread Dmitry Belyavsky
Dear Richard, Thank you, it works. On Mon, Aug 22, 2016 at 4:00 PM, Richard Levitte via RT wrote: > The issue isn't with the pre-created key, but because '-x509' doesn't fully > flag that something new is to be created. The freeze is because 'openssl > req' > tries to read a

[openssl-dev] [openssl.org #4655] Openssl req seems not to work with precreated key

2016-08-22 Thread Richard Levitte via RT
The issue isn't with the pre-created key, but because '-x509' doesn't fully flag that something new is to be created. The freeze is because 'openssl req' tries to read a csr... '-newkey', however, does flag the creation of a csr / x509, that's why the alternative command works. Fix in

[openssl-dev] [openssl.org #4655] Openssl req seems not to work with precreated key

2016-08-22 Thread Dmitry Belyavsky via RT
Hello openssl team, I experience problems with openssl version OpenSSL 1.1.0-pre7-dev I use Debian GNU Linux, the version is 8.5 The kernel version is Linux vr-dev 3.16.0-4-amd64 #1 SMP Debian 3.16.7-ckt25-2 (2016-04-08) x86_64 GNU/Linux I have created a private key with a command

Re: [openssl-dev] Partially- vs. full- reduced inputs to ecp_nistz256_neg

2016-08-22 Thread Andy Polyakov
>>> * Fix ecp_nistz256_mul_by_2 and ecp_nistz256_mul_by_3 to fully reduce >>> their outputs. >>> >>> * Fix ecp_nistz256_add to fully reduce its output. >> >> As for specifically addition see below. As for fixing mul_by_[23] and >> the fact that they use addition. There are two ways. a) Modify

Re: [openssl-dev] Crypto Module Config

2016-08-22 Thread Richard Levitte
In message <42bcb3fd-f5e2-404e-8981-e5cd304f4...@unh.newhaven.edu> on Mon, 22 Aug 2016 04:16:22 +, "Schmicker, Robert" said: rschm2> Hello, rschm2> rschm2> I am working on building a new crypto module that works with openssl. rschm2> I have looked through the

[openssl-dev] Crypto Module Config

2016-08-22 Thread Schmicker, Robert
Hello, I am working on building a new crypto module that works with openssl. I have looked through the source code and found the /crypto/ folder which would be where this module would reside. However, if I duplicate a folder such as md5 within the /crypto/ folder and rename it to say