[openssl-users] Error condition at a customer site

2015-07-12 Thread Thomas Herchek
Hi, Sometimes, during the processing of an HTTP cert response from the Symantec PKI Manager SCEP server, our application encounters an error condition while validating the certs attributes. The error that we see is Transaction not permitted or supported. It appears that this error is

Re: [openssl-users] Error condition at a customer site

2015-07-12 Thread Jakob Bohm
On 12/07/2015 22:01, Thomas Herchek wrote: Hi, Sometimes, during the processing of an HTTP cert response from the Symantec PKI Manager SCEP server, our application encounters an error condition while validating the certs attributes. The error that we see is Transaction not permitted or

Re: [openssl-users] [openssl-announce] OpenSSL Security Advisory

2015-07-12 Thread Jakob Bohm
On 10/07/2015 23:03, Jeffrey Walton wrote: During certificate verification, OpenSSL (starting from version 1.0.1n and 1.0.2b) will attempt to find an alternative certificate chain if the first attempt to build such a chain fails. An error in the implementation of this logic can mean that an

Re: [openssl-users] [openssl-announce] OpenSSL Security Advisory

2015-07-12 Thread Jeffrey Walton
In fact, I thought that was the reason we all had to wait ages before this long standing shortcoming was fixed. It almost sound like you are complaining you did not have to wait ages :) It's the inconsistency of first insisting this cannot go into a patch and then pushing out a broken

Re: [openssl-users] Vulnerability Disclosures

2015-07-12 Thread Richard Moore
On 12 July 2015 at 03:31, Salz, Rich rs...@akamai.com wrote: I'd be concerned about doing that. While this one seemed pretty rare -- only folks running a release less than 30 days old in production -- as a general rule, it's impossible to tell. For example, we THINK that PSK isn't used