Re: OpenSSL bufffer overflow

2007-10-05 Thread Gregory Shapiro
> Thanks! I did the same grep, but wasnt sure whether or not that particular > function (SSL_get_shared_ciphers) got called by another function in OpenSSL > which was originally called by some of the big apps like sendmail,apache > and sshd When I last researched this when the first problem wi

Re: missing Advisory at ftp.freebsd.org

2007-10-05 Thread Colin Percival
Olli Hauer wrote: > I am missing the advisory for openssl at ftp://ftp.freebsd.org/CERT/ We stopped uploading advisories there because we kept on running into problems with ftp mirrors being out of date, while have complete control over the security.freebsd.org webserver and can make sure files ar

Re: OpenSSL bufffer overflow

2007-10-05 Thread Simon L. Nielsen
On 2007.10.03 19:49:31 -0400, Mike Tancsa wrote: > At 05:43 PM 9/28/2007, Stefan Esser wrote: >> I did not see any commits to the OpenSSL code, recently; is anybody >> going to commit the fix? >> >> See http://www.securityfocus.com/archive/1/480855/30/0 for details ... > > How serious is this par

Re: OpenSSL bufffer overflow

2007-10-05 Thread Mike Tancsa
At 12:05 PM 10/5/2007, Simon L. Nielsen wrote: On 2007.10.03 19:49:31 -0400, Mike Tancsa wrote: > At 05:43 PM 9/28/2007, Stefan Esser wrote: >> I did not see any commits to the OpenSSL code, recently; is anybody >> going to commit the fix? >> >> See http://www.securityfocus.com/archive/1/480855/3

missing Advisory at ftp.freebsd.org

2007-10-05 Thread Olli Hauer
Hi, I am missing the advisory for openssl at ftp://ftp.freebsd.org/CERT/ Background: For long time i used the the quickpatch utility at my workstation to notify me about issues and *how* to fix it. With the web based advisory this is not possible since the .asc file contains only the pgp signat

Re: FastIPSec and OCF

2007-10-05 Thread Eygene Ryabinkin
Fri, Oct 05, 2007 at 02:10:06PM +0100, Bubble Reading wrote: > Thanks much for your help. You're welcome ;)) > I am using FreeBSD v6.2. > > My aim is to use a hardware crypto card. Yes, but for what purpose? To accelerate IPSec or to do some cryptographic operations? This is somewhat ritorica

Re: FastIPSec and OCF

2007-10-05 Thread Bubble Reading
Hiya, Can I use Fast-IPSec as a tool to run a crypto command ? Are there any examples ? Bubble On 10/5/07, Eygene Ryabinkin <[EMAIL PROTECTED]> wrote: > > Good day. > > Fri, Oct 05, 2007 at 10:51:56AM +0100, Bubble Reading wrote: > > Does FASTIPSec in FreeBSD use OCF framework ? Where can I fin

Re: FastIPSec and OCF

2007-10-05 Thread Eygene Ryabinkin
Fri, Oct 05, 2007 at 12:26:15PM +0100, Bubble Reading wrote: > Can I use Fast-IPSec as a tool to run a crypto command ? If you mean by 'Fast-IPSec' the implementation of the IPSec made by George Neville-Neil (used to be FAST_IPSEC, but in the 7-CURRENT old KAME stack was thrown away, so now it is

Re: FastIPSec and OCF

2007-10-05 Thread Eygene Ryabinkin
Good day. Fri, Oct 05, 2007 at 10:51:56AM +0100, Bubble Reading wrote: > Does FASTIPSec in FreeBSD use OCF framework ? Where can I find more > documentation ? OCF: man 9 crypto IPSec: man 4 ipsec It will give you some pointers, at least on the 7-CURRENT. You can not say 'OCF Framework', because

FastIPSec and OCF

2007-10-05 Thread Bubble Reading
Hi, Does FASTIPSec in FreeBSD use OCF framework ? Where can I find more documentation ? I wish to run cryptographic algorithms after setting a VPN. What command should I use to run a particular crytographic algorithm (e.g. 3DES etc.) Where can I find all such information ? -- Regards, Bubble _

Test

2007-10-05 Thread Bubble Reading
Test -- Regards, Bubble ___ freebsd-security@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-security To unsubscribe, send any mail to "[EMAIL PROTECTED]"