Re: openssl hmac and key on the command line

2024-06-08 Thread Carson Gaspar
On 6/8/2024 5:12 AM, Neil Horman wrote: printf '%s' "hello" | LD_LIBRARY_PATH=$PWD ./apps/openssl dgst -sha1 -hmac $(cat key.txt) SHA1(stdin)= c3b424548c3dbd02161a9541d89287e689f076d7 That will expose the key in the process args, so is NOT secure. -- Carson

Re: Best Practices for private key files handling

2022-09-15 Thread Carson Gaspar
On 9/15/2022 3:15 PM, Shawn Heisey via openssl-users wrote: If symlinks are used responsibly, they won't have security risks. In general, if the program checks the ownership and permissions of the actual file before using it, it shouldn't matter whether there is a symlink or not. As long

Re: [openssl-users] OpenSSL 1.0.2 Solaris 32 bit build is broken

2015-04-16 Thread Carson Gaspar
As a counter-example, I just built OpenSSL 1.0.2a 32-bit on SPARC and 'make test' is just fine. Host: Sun Fire v490 Compiler: Solaris Studio 12.2 OS: Solaris 10 u9 Configure args: solaris-sparcv9-cc So I suspect the OP is suffering from some local issue. -- Carson

Re: [openssl-users] OpenSSL 1.0.2 Solaris 32 bit build is broken

2015-04-16 Thread Carson Gaspar
On 4/16/15 1:49 PM, Viktor Dukhovni wrote: Somewhat (Solaris) related question: * Do you have access to any SunOS 5.10 systems? * If you do, can you check whether /bin/sh supports the POSIX export built-in syntax: export NAME=value or does one have to write

Re: [openssl-users] OpenSSL 1.0.2 Solaris 32 bit build is broken

2015-04-15 Thread Carson Gaspar
On 4/15/15 4:59 AM, Jeffrey Walton wrote: Can you try with a different compiler? Is Clang available to you? (If not, I can provide you with a script or recipe to build it). Here's what one person was just saying about Sun's compiler on another list. He maintains another crypto-toolkit: ...

Re: References to NSS libraries

2013-01-08 Thread Carson Gaspar
On 1/8/13 9:52 AM, Jeffrey Walton wrote: That seems like a really odd requirement. Is there any reading on the topic? man nsswitch.conf Generally, I prefer static linking in high integrity software. And I oppose plug-in like functionality. Then you need to not run on Linux or Solaris, or

Re: Problem making shared libraries on Solaris

2008-03-27 Thread Carson Gaspar
Joseph Felten wrote: Has anyone out there managed to compile openssl-0.9.8g shared libraries under Solaris 8? I've tried both gcc version 3.4.6 and the Sun Studio 11 Sparc compiler (the installation of which was an odyssey unto itself) and both puke on linking with the below error relocations

Re: Problem compiling openssl-0.9.8d on Solaris 8

2006-11-14 Thread Carson Gaspar
Garey Mills wrote: Hi - Compiling with gcc I get this error: making all in crypto/ui... make[2]: Entering directory `/usr/local/src/openssl-0.9.8d/crypto/ui' cc -I.. -I../.. -I../../include -KPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -xtarget=ultra

RE: renegotiating problem - connection hanging?

2006-06-21 Thread Carson Gaspar
--On Wednesday, June 21, 2006 3:36 PM -0700 David Schwartz [EMAIL PROTECTED] wrote: The same problem occurs with one thread. Consider the following code, assume blocking sockets: 1) do some stuff 2) do a huge write, don't check for short writes since our socket is blocking That code

Re: Solaris make install problems for 0.9.7e

2004-10-28 Thread Carson Gaspar
--On Thursday, October 28, 2004 15:13:14 +0100 Robert Bannocks [EMAIL PROTECTED] wrote: I get this too if you quote the $(EXHEADER) to be $(EXHEADER) in the install section of the files listed below it compiles and installs ok. This will break if EXHEADER is _not_ empty. The following snippet

ASN.1 buffer overflows - is OpenSSL vulnerable?

2002-02-28 Thread Carson Gaspar
The recently published SNMP vulnerabilities are mostly ASN.1 vulnerabilities. Has anyone reviewed the ASN.1 code, and OpenSSL's usage thereof, to see if there are any issues? -- Carson Gaspar - [EMAIL PROTECTED] Queen Trapped in a Butch Body

Solaris gcc shared library target is broken in 0.9.6a

2001-04-14 Thread Carson Gaspar
-shared:\2,' Configure Configure.fixed We only noticed when we tried to compile under 2.5.1 (don't ask...) which isn't supported by the current Sun cc. Sorry I didn't catch this in the release candidates. -- Carson Gaspar - [EMAIL PROTECTED] Queen trapped in a

Re: Build fails on Solaris 5.6

2000-12-27 Thread Carson Gaspar
includes the current directory. If the make process requires . to be in your PATH, it's broken and should be fixed. I don't think it does, though, since my PATH does _not_ contain ., and 0.9.6 built just fine... -- Carson Gaspar -- [EMAIL PROTECTED] Queen Trapped in a Butch Body