[openssl.org #3076] openssl 1.0.1e outdated manuals

2013-06-18 Thread Doru Georgescu via RT
openssl 1.0.1e's man 3 ecdsa is two times outdated and horribly misleading. Since it was written the API changed and then EC_KEY was buried into the inner headers of the library such that key-group (it should have been eckey-group, I guess) can no longer be accessed directly like in the manual

Re: [openssl.org #3076] openssl 1.0.1e outdated manuals

2013-06-18 Thread Matt Caswell
On 18 June 2013 08:11, Doru Georgescu via RT r...@openssl.org wrote: openssl 1.0.1e's man 3 ecdsa is two times outdated and horribly misleading. Since it was written the API changed and then EC_KEY was buried into the inner headers of the library such that key-group (it should have been

Re: [openssl.org #3074] On PA-RISC, OPENSSL_cleanse() causes crash when called from outside libcrypto, patch included

2013-06-18 Thread Andy Polyakov via RT
Hi, and thanks for report! I got a strange bug report claiming that openssl md5 was dumping core on old parisc hardware. Sure enough, it was generating the correct result but then crashing: $ openssl md5 /dev/null MD5(/dev/null)= d41d8cd98f00b204e9800998ecf8427e Segmentation fault

Re: [openssl.org #3076] openssl 1.0.1e outdated manuals

2013-06-18 Thread Matt Caswell
On 18 June 2013 09:42, Matt Caswell fr...@baggins.org wrote: With regards to other manual pages it is now possible to make updates and fixes directly on the wiki (as long as you are comfortable with POD syntax). Periodically I will be submitting as a patch to the project containing any updates

Re: MONTMUL performance: t4 engine vs inlined t4

2013-06-18 Thread Andy Polyakov
Misaki, The measurement I sent yesterday for OpenSSL (with inlined T4 instruction support) was not quite accurate. Some of the T4 specific code you committed was not enabled when we tested, and I realized that __sparc__ was not defined on our system. Thus, I changed #if defined(__sparc__) to

Re: [openssl.org #3075] [PATCH] Fix ASM support for FreeBSD 10

2013-06-18 Thread Andy Polyakov via RT
For FreeBSD 10 we have changed /usr/lib/libc.so to be a text linker script and no longer a symlink. This breaks the config check on i386 for what binary format to use when building with ASM support. The current config check expects /usr/lib/libc.so to symlink to a /usr/lib/libc.so.X file to

Re: [openssl.org #3072] Strange behaviour when talking to microsoft exchange

2013-06-18 Thread Kurt Roeckx via RT
On Tue, Jun 18, 2013 at 12:30:58AM -0400, Dave Thompson wrote: Looking at your state_debug.log (which tries 1.2) I see: read/write preliminary SMTP as normal write ClientHello: offer 1.2 read ServerHello: agree 1.0 DES-CBC3-SHA rest of handshake normal Aside: I notice your build (here

Regarding SSL cert generation

2013-06-18 Thread Ajith Mamachan
Hi When I generated the cert thru openssl, It not starting with BEGIN CERTIFICATE, rather with Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha1WithRSAEncryption This creates problem in importing the cert to my server. Anyone knows ,

Re: Apple are, apparently, dicks...

2013-06-18 Thread Rob Stradling
On 14/06/13 14:16, Ben Laurie wrote: On 14 June 2013 14:08, Rob Stradling rob.stradl...@comodo.com wrote: snip Apparently the ECDHE-ECDSA bug is in SecureTransport, which is an integral component of OSX.

parallel make broken

2013-06-18 Thread Richard Weinberger
Hi! While building openssl-1.0.1e I noticed that the parallel build is broken. If I try to build openssl with make -j N where N is 1 the build fails due to unresolved symbols. E.g: make[2]: Entering directory `/home/rw/work/vpnbox/v2/maker/_build/openssl/openssl-1.0.1e/apps' make[2]: Warnung:

RE: [openssl.org #3072] Strange behaviour when talking to microsoft exchange

2013-06-18 Thread Dave Thompson
From: owner-openssl-...@openssl.org On Behalf Of Kurt Roeckx via RT Sent: Tuesday, 18 June, 2013 12:30 On Tue, Jun 18, 2013 at 12:30:58AM -0400, Dave Thompson wrote: Looking at your state_debug.log (which tries 1.2) I see: read/write preliminary SMTP as normal write ClientHello: offer

Re: parallel make broken

2013-06-18 Thread Mike Frysinger
On Tuesday 18 June 2013 07:37:55 Richard Weinberger wrote: While building openssl-1.0.1e I noticed that the parallel build is broken. yes, it's pretty much always been broken I found this patch on the net: http://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/dev-libs/openssl/fi

Re: [openssl.org #3072] Strange behaviour when talking to microsoft exchange

2013-06-18 Thread Kurt Roeckx
On Tue, Jun 18, 2013 at 05:25:06PM -0400, Dave Thompson wrote: My conclussions: - One of the 2 sides doesn't implement DES-CBC-SHA/DES-CBC3-SHA properly ... I think you're right and I suspect the other side because openssl interoperates with lots of folks -- unless there's something

Re: [openssl.org #3075] [PATCH] Fix ASM support for FreeBSD 10

2013-06-18 Thread Bryan Drewery
On 6/18/2013 4:47 AM, Andy Polyakov via RT wrote: For FreeBSD 10 we have changed /usr/lib/libc.so to be a text linker script and no longer a symlink. This breaks the config check on i386 for what binary format to use when building with ASM support. The current config check expects

Re: [openssl.org #3075] [PATCH] Fix ASM support for FreeBSD 10

2013-06-18 Thread Bryan Drewery via RT
On 6/18/2013 4:47 AM, Andy Polyakov via RT wrote: For FreeBSD 10 we have changed /usr/lib/libc.so to be a text linker script and no longer a symlink. This breaks the config check on i386 for what binary format to use when building with ASM support. The current config check expects

RE: [openssl.org #3072] Strange behaviour when talking to microsoft exchange

2013-06-18 Thread Dave Thompson
From: owner-openssl-...@openssl.org On Behalf Of Kurt Roeckx Sent: Tuesday, 18 June, 2013 18:50 On Tue, Jun 18, 2013 at 05:25:06PM -0400, Dave Thompson wrote: My conclussions: - One of the 2 sides doesn't implement DES-CBC-SHA/DES-CBC3-SHA properly ... I think you're right and I