Forthcoming OpenSSL releases

2014-08-03 Thread OpenSSL
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Forthcoming OpenSSL releases The OpenSSL project team would like to announce the forthcoming release of OpenSSL versions 1.0.1i, 1.0.0n and 0.9.8zb. These releases will be made available on 6th August at some time after

Re: Question on EVP_DecryptFinal_ex

2014-08-03 Thread David Li
Hi Thulasi/Rich, Thanks! This prompted me to uncover another bug in the code. I did encrypt an extra block of zeros! Now everything makes sense. Can't help to dig a little deeper into this: In AES-CBC mode, the decryption can be paralleled. Is this what the EVP_DecryptUpdate is doing behind the

RE: Query on X509 certificate validation- EVP_VerifyUpdate EVP_VerifyFinal

2014-08-03 Thread Mitra, Rituparna (STSD)
Hi, Thanks for the response. The problem I am seeing is not with the DN. From what I understand, the distinguished name can be any one of the fields – CN, issuer, subject, that comes as part of the x509 certificate contents. None of these contain the ! character. Let me clarify the issue a