RE: [ANNOUNCE] OpenSSL 0.9.6g released

2002-08-10 Thread Thomas J. Hruska
At 08:55 PM 8/9/2002 -0400, Rich Salz writeth: >> Don't claim to support a platform if you don't intend on supporting it. >> You have a Win32 version...so support it - completely. > >Two points: First, You must be knew to this whole open source thing. >"Completely support"? Come on, I'll betch

Re: [ANNOUNCE] OpenSSL 0.9.6g released

2002-08-10 Thread Thomas J. Hruska
At 02:40 AM 8/10/2002 +0200, Richard Levitte - VMS Whacker writeth: >In message <[EMAIL PROTECTED]> on Fri, 09 Aug 2002 19:39:14 -0400, "Thomas J. Hruska" <[EMAIL PROTECTED]> said: > >So, the question comes back to you, in reference to 0.9.6{e,f,g}: >would you rather have us having waited a little

Re: [ANNOUNCE] OpenSSL 0.9.6g released

2002-08-10 Thread Bodo Moeller
Gregg Andrew <[EMAIL PROTECTED]>: > That being said, are the fixes in 0.9.6g reliavant to upgrading > 0.9.6e on unix/solaris platform, Unless you have already installed 0.9.6f, you may want to upgrade to 0.9.6g. Most problems are fixed in 0.9.6e, but there's at least a possibility of denial of

Re: Doubt regarding the cert that signs the CRL

2002-08-10 Thread Rich Salz
> Should the certificate that signs the CRL be the same cert that signs the > end-entity's certificates? It can be, yes. In many cases it is. > or Can any other certificate(ie., authorised to do so) can sign the CRL? Yes, the CA can sign another cert that gives it the authority. There are va

Finding the openssl.cnf file

2002-08-10 Thread Dan Kalowsky
Hello list, I did some searching online and didn't find any mention of this, so if it's somewhere archived, please point me there. I'm trying to fix a bug in the PHP --with-openssl flag, where the module is searching for the openssl.cnf file. For more information see PHP Bug #18295 (http://bugs

RE: [ANNOUNCE] OpenSSL 0.9.6g released

2002-08-10 Thread Andrew T. Finnell
See how bad you can slaughter the english language when you don't have coffee? ;-) - Andrew T. Finnell Active Solutions L.L.C [EMAIL PROTECTED] > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]] On Behalf Of Andrew > T. Finnell > Sent: Saturday, August 10, 20

RE: [ANNOUNCE] OpenSSL 0.9.6g released

2002-08-10 Thread Andrew T. Finnell
I feel it was pretty appropriate. We upgraded to 0.9.6e when we saw the vuln. Now they can do a DOS instead of a Buffer Overflow correct? The consensus in my development team was that was much better to be able to crash the application that be able to obtain access to the box. The only bad

Doubt regarding the cert that signs the CRL

2002-08-10 Thread Chandra Sekhar Suram
Hi all, I have a doubt regarding the certificate that signs the CRL. Should the certificate that signs the CRL be the same cert that signs the end-entity's certificates? or Can any other certificate(ie., authorised to do so) can sign the CRL? Awaiting your valuable response. Regards Suram ___