signature_algorithms in client hello in FIPS mode

2013-06-16 Thread Geoff_Lowe
OpenSSL removes the RSA/MD5 combination from the tls12_sigalgs[] table in the tls12_get_req_sig_algs() function when FIPS mode is in effect. (This reduced set of signature/hash algorithm pairs is used to fill in the supported_signature_algorithms field in the TLS 1.2 Certificate Request

Re: [openssl.org #3074] On PA-RISC, OPENSSL_cleanse() causes crash when called from outside libcrypto, patch included

2013-06-16 Thread Steve Marquess
On 06/16/2013 05:33 AM, Mitch Blank via RT wrote: I got a strange bug report claiming that openssl md5 was dumping core on old parisc hardware. Sure enough, it was generating the correct result but then crashing... It turns out the problem is rather subtle. ... Not sure if this fix is

Re: [openssl.org #3074] On PA-RISC, OPENSSL_cleanse() causes crash when called from outside libcrypto, patch included

2013-06-16 Thread Steve Marquess via RT
On 06/16/2013 05:33 AM, Mitch Blank via RT wrote: I got a strange bug report claiming that openssl md5 was dumping core on old parisc hardware. Sure enough, it was generating the correct result but then crashing... It turns out the problem is rather subtle. ... Not sure if this fix is