Re: [openssl-dev] FIPs mode and openssl

2016-05-27 Thread Steve Marquess
On 05/27/2016 05:11 AM, Mody, Darshan (Darshan) wrote: > Hi, > > > > I have a query with regards to FIPS mode and use of Openssl. I have put > my kernel image n FIPs mode using the documentation >

[openssl-dev] [openssl.org #2270] CVS HEAD: bugfix for BIO printf() code: floating point does not print + other wrongs in that code path

2016-05-27 Thread Matt Caswell via RT
I applied this patch in part. The code has moved on since this was written and this was from pre-reformat times so I added the changes that were still applicable "manually". See commit 242073bdbc. Also properly implemented the %e and %g format specifiers in commit d6056f085d. Finally I added a

Re: [openssl-dev] FIPs mode and openssl

2016-05-27 Thread Hubert Kario
On Friday 27 May 2016 09:11:26 Mody, Darshan wrote: > Hi, > > > > I have a query with regards to FIPS mode and use of Openssl. I have > put my kernel image n FIPs mode using the documentation > (https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Lin >

[openssl-dev] [openssl.org #4255] OpenSSL-1.1.0-pre2 failures using MinGW-W64

2016-05-27 Thread Matt Caswell via RT
On Tue May 10 12:36:40 2016, matt wrote: > Re-opening. OP reports there are still issues with "make test" hanging. The "make test" hang issue on mingw should now be resolved in the head of master. Unfortunately there is now a completely different issue preventing compilation for mingw :-( That is

Re: [openssl-dev] FIPs mode and openssl

2016-05-27 Thread Marcus Meissner
On Fri, May 27, 2016 at 09:50:47AM +, Mody, Darshan (Darshan) wrote: > Thanks Steve, > > My question here is do I need to put openssl in FIPS mode for my application, > even when Kernel is in FIPS mode. I get FIPS_mode() returning true when I > initialize openssl from my application. You

Re: [openssl-dev] [openssl.org #4545] Crash in crypto/rand/md_rand.c

2016-05-27 Thread Matt Caswell
On 27/05/16 11:07, Mick Saxton via RT wrote: > Hi Matt > > The test program runs against our major new development so I cannot share it > as is. > > I will try to produce a skeleton version which I could let you have. > > - But that will be end if next week as I am away for a few

Re: [openssl-dev] FIPs mode and openssl

2016-05-27 Thread Mody, Darshan (Darshan)
Thanks Steve, My question here is do I need to put openssl in FIPS mode for my application, even when Kernel is in FIPS mode. I get FIPS_mode() returning true when I initialize openssl from my application. Regards Darshan From: openssl-dev

[openssl-dev] [openssl.org #4545] Crash in crypto/rand/md_rand.c

2016-05-27 Thread Matt Caswell via RT
On Fri May 20 15:49:49 2016, mi...@1e.com wrote: > Hi > > Before going any further I would like to state that I have only seen > this problem when we have 1 or more concurrent connections. > > Mostly we notice it on Windows but I have seen it on linux (Ubuntu). > > I first noticed it when

Re: [openssl-dev] [openssl.org #4545] Crash in crypto/rand/md_rand.c

2016-05-27 Thread Mick Saxton via RT
Hi Matt The test program runs against our major new development so I cannot share it as is. I will try to produce a skeleton version which I could let you have. - But that will be end if next week as I am away for a few days - That is providing that exhibits the bug. Mick

[openssl-dev] FIPs mode and openssl

2016-05-27 Thread Mody, Darshan (Darshan)
Hi, I have a query with regards to FIPS mode and use of Openssl. I have put my kernel image n FIPs mode using the documentation

Re: [openssl-dev] [openssl.org #4545] Crash in crypto/rand/md_rand.c

2016-05-27 Thread Dmitry Belyavsky
Hello, I can confirm that I have seen a similar behavior in multi-thread environment. Unfortunately, I do not have a script to reproduce it either. On Fri, May 20, 2016 at 6:49 PM, Mick Saxton via RT wrote: > Hi > > Before going any further I would like to state that I have

Re: [openssl-dev] [openssl.org #4545] Crash in crypto/rand/md_rand.c

2016-05-27 Thread Dmitry Belyavsky via RT
Hello, I can confirm that I have seen a similar behavior in multi-thread environment. Unfortunately, I do not have a script to reproduce it either. On Fri, May 20, 2016 at 6:49 PM, Mick Saxton via RT wrote: > Hi > > Before going any further I would like to state that I have

Re: [openssl-dev] [openssl.org #4545] Crash in crypto/rand/md_rand.c

2016-05-27 Thread Matt Caswell via RT
On 27/05/16 11:07, Mick Saxton via RT wrote: > Hi Matt > > The test program runs against our major new development so I cannot share it > as is. > > I will try to produce a skeleton version which I could let you have. > > - But that will be end if next week as I am away for a few

[openssl-dev] [openssl.org #2369] mail/rfc822Mailbox should be encoded as IA5String, not DirectoryString

2016-05-27 Thread Stephen Henson via RT
Fixed now, thanks for the report. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org -- Ticket here: http://rt.openssl.org/Ticket/Display.html?id=2369 Please log in as guest with password guest if prompted --

Re: [openssl-dev] [openssl.org #4255] OpenSSL-1.1.0-pre2 failures using MinGW-W64

2016-05-27 Thread Matt Caswell
On 27/05/16 15:58, sav...@ukr.net wrote: > > > --- Исходное сообщение --- > От кого: "Matt Caswell via RT" > Дата: 27 мая 2016, 17:45:28 > > The "make test" hang issue on mingw should now be resolved in the head of > master. Unfortunately there is now a completely

Re: [openssl-dev] [openssl.org #4501] bug in BN_mod_word

2016-05-27 Thread Peter Chernyshev via RT
Hi Matt! in connected file test. Peter Chernyshev/ 2016-05-26 2:50 GMT+04:00, Matt Caswell via RT : > On Thu Apr 07 11:44:09 2016, peter.chernys...@gmail.com wrote: >> Добрый день! >> программа библиотеки BN_mod_word >> BN_ULONG BN_mod_word(const BIGNUM *a, BN_ULONG w); >> >>

[openssl-dev] [openssl.org #4311] OpenSSL 1.1.0-pre3: quote PERL=$(PERL) in Makefiles

2016-05-27 Thread Richard Levitte via RT
On Wed May 11 10:51:46 2016, rainer.j...@kippdata.de wrote: > Am 10.05.2016 um 21:54 schrieb Richard Levitte via RT: > > I understand this part. What I'm questioning is the need to set PERL > > to > > "/usr/bin/env perl" to begin with. It's practically not different at > > all from > > setting it

[openssl-dev] [openssl.org #4486] PATCH: fix NMAKE fatal error U1073: "don't know how to make 'LNAME\openssl\Configurations\windows-makefile.tmpl'"

2016-05-27 Thread Richard Levitte via RT
The fix just got merged into master. Having heard nothing else, I'm closing this ticket. Cheers, Richard On Wed May 25 11:39:11 2016, levitte wrote: > Now that 4492 was closed, I could give this a go... and no, the > proposed patch > wasn't enough, there were a few more places that needed extra