Re: [openssl-dev] [openssl.org #4614] pthread_once and malloc failures

2016-07-11 Thread Viktor Dukhovni
On Mon, Jul 11, 2016 at 05:48:06PM +, Salz, Rich via RT wrote: > Previously we've changed return-types from void to int. If there's still > time, that seems like the thing to do here. With pthread_once and friends the pattern is to use void init functions, and as necessary check for

Re: [openssl-dev] [openssl.org #4614] pthread_once and malloc failures

2016-07-11 Thread Salz, Rich via RT
Previously we've changed return-types from void to int. If there's still time, that seems like the thing to do here. -- Ticket here: http://rt.openssl.org/Ticket/Display.html?id=4614 Please log in as guest with password guest if prompted -- openssl-dev mailing list To unsubscribe:

Re: [openssl-dev] [openssl.org #4614] pthread_once and malloc failures

2016-07-11 Thread Alessandro Ghedini
On Mon, Jul 11, 2016 at 04:20:29PM +, Kurt Roeckx via RT wrote: > Hi, > > When trying to check what happens if we simulate malloc() > returning NULL I'm running into a problem that I'm not sure how to > deal with. > > We have CRYPTO_THREAD_run_once(), which takes an init() function > that

Re: [openssl-dev] Openssl apps linker errors after adding new cipher

2016-07-11 Thread Benjamin Kaduk
On 07/10/2016 09:13 PM, Wang Hao Lee wrote: > > After I changed these files. Compiling using ./config fips; make > depend; make was successful and the apps can link nicely. I > even manage to test my cipher via the EVP interface: openssl speed > -evp mynewcipher. > > However, when I build by

[openssl-dev] [ARM] sha1_block_armv8 caller

2016-07-11 Thread Catalin Vasile
Hi, I see that there is function named sha1_block_armv8 defined in crypto/sha/asm/sha1-armv8.pl, but I cannot find any function that calls it. Cata -- openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

[openssl-dev] [openssl.org #4602] Missing accessors

2016-07-11 Thread Richard Levitte via RT
On Mon Jul 11 11:34:35 2016, mattias.ell...@physics.uu.se wrote: > fre 2016-07-08 klockan 00:42 +0200 skrev Kurt Roeckx: > > Mattias, > > > > Can you explain why this is needed, what the code is trying to do? > > > > > > Kurt > > > > Hi! > > The modification of the extension flags happens in at

Re: [openssl-dev] [openssl.org #4602] Missing accessors

2016-07-11 Thread Mattias Ellert via RT
fre 2016-07-08 klockan 00:42 +0200 skrev Kurt Roeckx: > On Thu, Jul 07, 2016 at 09:40:24PM +, Richard Levitte via RT > wrote: > > On Sat Jul 02 10:59:38 2016, k...@roeckx.be wrote: > > > /* Add to include/openssl/x509v3.h */ > > > > > > void X509_set_extension_flags(X509 *x, uint32_t

[openssl-dev] [openssl.org #4612] Appcrash on SSL_CTX_new(SSLv2_server_method()) on windows 7 x64 with OpenSSL-1.0.1t

2016-07-11 Thread Rich Salz via RT
SSLv2 method returns NULL now. Listed in the CHANGES file. SSLv2 has been removed for security reasons. Do not use it. Also do not use such an old release. :) Closing ticket. -- Ticket here: http://rt.openssl.org/Ticket/Display.html?id=4612 Please log in as guest with password guest if prompted

[openssl-dev] [openssl.org #4612] Appcrash on SSL_CTX_new(SSLv2_server_method()) on windows 7 x64 with OpenSSL-1.0.1t

2016-07-11 Thread Dmytro Shamatrin via RT
Appcrash on SSL_CTX_new(SSLv2_server_method()) on windows 7 x64 with OpenSSL-1.0.1t After upgrade from OpenSSL-1.0.1L version to 1.0.1t we got Appcrash on windows machine. After investigation I found that it started to happen after R version. #include #include #include #include

[openssl-dev] [openssl.org #4613] openssl RSA key: verify error 1.0.1t

2016-07-11 Thread gaowenchao via RT
| | | | | | | Dear I was trying to install openssl 1.0.1t on AIX5.3, and it report error when running "make test". Below is the error test. CMS consistency test /usr/bin/perl cms-test.pl CMS => PKCS#7 compatibility tests signed content DER format, RSA key: verify error make: 1254-004

Re: [openssl-dev] MGF1-OAEP with SHA2

2016-07-11 Thread Kurt Roeckx
On Sat, Jul 09, 2016 at 08:42:39PM +0200, c.hol...@ades.at wrote: > Hi! > > I tried with Openssl 1.0.1t from current Debian testing. > But I get > undefined symbol: EVP_PKEY_CTX_set_rsa_oaep_md 1.0.1t is in stable, not testing. 1.0.1 doesn't have that function, 1.0.2 does. Kurt --

[openssl-dev] Bug#829272: Info received (Fwd: [openssl.org #4602] Missing accessors)

2016-07-11 Thread 829...@bugs.debian.org via RT
Thank you for the additional information you have supplied regarding this Bug report. This is an automatically generated reply to let you know your message has been received. Your message is being forwarded to the package maintainers and other interested parties for their attention; they will

Re: [openssl-dev] [openssl.org #4602] Missing accessors

2016-07-11 Thread David Woodhouse via RT
On Mon, 2016-07-11 at 13:08 +, Mattias Ellert via RT wrote: > > > Looking at the various places in the code where get_issuer > and check_issued are accessed, they mostly use the context rather than > the store. Here are the places I have found: > >

Re: [openssl-dev] [openssl.org #4613] openssl RSA key: verify error 1.0.1t

2016-07-11 Thread Salz, Rich via RT
Can you use a more recent version? 1.0.1 is end of life and only getting security fixes (and then only for the rest of the year). -- Ticket here: http://rt.openssl.org/Ticket/Display.html?id=4613 Please log in as guest with password guest if prompted -- openssl-dev mailing list To

[openssl-dev] [ARM] sha1_block_armv8 caller

2016-07-11 Thread Catalin Vasile
Hi, I see that there is function named sha1_block_armv8 defined in crypto/sha/asm/sha1-armv8.pl, but I cannot find any function that calls it. Which function calls sha1_block_armv8? Cata -- openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Re: [openssl-dev] [openssl.org #4602] Missing accessors

2016-07-11 Thread Mattias Ellert via RT
fre 2016-07-08 klockan 06:08 + skrev Richard Levitte via RT: > On Thu Jul 07 21:29:09 2016, levitte wrote: > > On Sat Jul 02 10:59:38 2016, k...@roeckx.be wrote: > > > /* Add to include/openssl/x509_vfy.h : */ > > > > > > typedef int (*X509_STORE_CTX_get_issuer)(X509 **issuer, > > >

Re: [openssl-dev] [openssl.org #4602] Missing accessors

2016-07-11 Thread David Woodhouse
On Mon, 2016-07-11 at 13:08 +, Mattias Ellert via RT wrote: > > > Looking at the various places in the code where get_issuer > and check_issued are accessed, they mostly use the context rather than > the store. Here are the places I have found: > >

[openssl-dev] [openssl.org #4611] PKCS12_create() not thread-safe for ECDSA

2016-07-11 Thread Rich Salz via RT
ah, you're right, the lock in EC_KEY should be used. thanks. -- Ticket here: http://rt.openssl.org/Ticket/Display.html?id=4611 Please log in as guest with password guest if prompted -- openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Re: [openssl-dev] [openssl.org #4612] Appcrash on SSL_CTX_new(SSLv2_server_method()) on windows 7 x64 with OpenSSL-1.0.1t

2016-07-11 Thread Kurt Cancemi via RT
Hello, In 1.0.1s OpenSSL disabled SSLv2 by default in the build. So use perl Configure no-asm enable-ssl2 -DOPENSSL_USE_IPV6=0 VC-WIN32 Excerpt from CHANGES "Changes between 1.0.1r and 1.0.1s [1 Mar 2016]" “ Disable SSLv2 default build, default negotiation and weak ciphers. SSLv2 is by

Re: [openssl-dev] [openssl.org #4612] Appcrash on SSL_CTX_new(SSLv2_server_method()) on windows 7 x64 with OpenSSL-1.0.1t

2016-07-11 Thread Kurt Cancemi
Hello, In 1.0.1s OpenSSL disabled SSLv2 by default in the build. So use perl Configure no-asm enable-ssl2 -DOPENSSL_USE_IPV6=0 VC-WIN32 Excerpt from CHANGES "Changes between 1.0.1r and 1.0.1s [1 Mar 2016]" “ Disable SSLv2 default build, default negotiation and weak ciphers. SSLv2 is by

[openssl-dev] [openssl.org #4614] pthread_once and malloc failures

2016-07-11 Thread Kurt Roeckx via RT
Hi, When trying to check what happens if we simulate malloc() returning NULL I'm running into a problem that I'm not sure how to deal with. We have CRYPTO_THREAD_run_once(), which takes an init() function that returns void, so it can't return failures. At least the pthread_once() function also