Re: [openssl.org #3162] Resolved: enhancement request - PSK AES algorithms available in FIPS mode

2013-11-12 Thread Fredrik Jansson via RT
Thank you Steve! Fredrik On Wed, Nov 6, 2013 at 4:18 PM, Stephen Henson via RT wrote: > According to our records, your request has been resolved. If you have any > further questions or concerns, please respond to this message. > _

[openssl.org #3162] enhancement request - PSK AES algorithms available in FIPS mode

2013-11-06 Thread Fredrik Jansson via RT
Hi! I would like to request the following algorithms to be available in FIPS mode: TLS1_TXT_PSK_WITH_AES_128_CBC_SHA TLS1_TXT_PSK_WITH_AES_256_CBC_SHA Please see the "DTLS PSK in FIPS mode" discussion on then openssl-users list. Attached is a patch for s3_lib.c that makes the said algorithms ava

Re: [openssl.org #3152] AutoReply: Segfault in d1_pkt.c in FIPS mode

2013-11-06 Thread Fredrik Jansson via RT
Hi! I would like to close this since it's not a bug. Best regards, Fredrik Jansson On Mon, Oct 28, 2013 at 9:33 AM, The default queue via RT wrote: > > Greetings, > > This message has been automatically generated in response to the > creation of a trouble ticket regarding: > "Segfault

[openssl.org #3152] Segfault in d1_pkt.c in FIPS mode

2013-10-28 Thread Fredrik Jansson via RT
OpenSSL 1.0.1e In the function dtls1_get_record the pointer p is initialized to NULL at function entry. Later the pointer may be initialized inside an if statement. The pointer is later dereferenced, w/o null check, resulting in a segfault. In our product this only happens when OpenSSL is in FIPS