RE: OpenSSL Security Advisory

2009-01-14 Thread Takurou Saitou
> -Original Message- > From: owner-openssl-us...@openssl.org > > > ssl/s2_srvr.c ssl/s3_srvr.c : The error in those two file seems to mean > > that server verification of DSA signed clients certificates is also > > affected. > > > > DSA cannot be used with SSLv2 so it is not . Is it

Re: Problem building Openssl-0.9.8j with fips

2009-01-14 Thread Justin A
Dr. Steve, Thanks. I tried your option ( ms\ do_win64i )this is the error on the same link line I am getting.. Error     perl util/copy.pl ".\engines\e_capi_err.h" "tmp32\e_capi_err.h" Copying: ./engines/e_capi_err.h to tmp32/e_capi_err.h     cl /Fotmp32\fips_standalone_sha1.ob

Re: Problem building Openssl-0.9.8j with fips

2009-01-14 Thread Dr. Stephen Henson
On Wed, Jan 14, 2009, Justin A wrote: > Hello Dr. Steve, > > Thank you for your response. > > I tried the workaround you mentioned (util\pl\VC-32.pl )  changed line 408 to > $ret.= "$mwex \$(EX_LIBS) " if ($files =~ /O_FIPSCANISTER/ && > !$fipscanisterbuild); > > Still getting the same error

RE: OpenSSL 0.9.8j build problem on ia64 SuSE 9.2

2009-01-14 Thread Mark Lavi
> On Wed, Jan 14, 2009, Dr. Stephen Henson wrote: >Ah, forget those changes I suggested try this instead: >http://cvs.openssl.org/chngview?cn=17786 Perfect, that solved the build issue: my build completes, passes make test, and installs. I'll report back if I encounter any other issues, but all l

Re: Problem building Openssl-0.9.8j with fips

2009-01-14 Thread Justin A
Okie by adding this one  bufferoverflowU.lib, I was able to surpass the error. Thanks, Justin --- On Wed, 1/14/09, Justin A wrote: From: Justin A Subject: Re: Problem building Openssl-0.9.8j with fips To: openssl-users@openssl.org Date: Wednesday, January 14, 2009, 11:13 AM Hello Dr. Steve,

Re: Problem building Openssl-0.9.8j with fips

2009-01-14 Thread Justin A
Hello Dr. Steve, Thank you for your response. I tried the workaround you mentioned (util\pl\VC-32.pl )  changed line 408 to $ret.= "$mwex \$(EX_LIBS) " if ($files =~ /O_FIPSCANISTER/ && !$fipscanisterbuild); Still getting the same error     perl util/copy.pl ".\engines\e_capi_e

Re: Client-Authentication using Crypt::SSLeay

2009-01-14 Thread Olaf Gellert
Hi all, there was a little cut-n-paste error in my previous mail, I forgot one line in the script. The error remains the same... Olaf Gellert wrote: > $file=$ENV{HTTPS_PKCS12_FILE}; $pass=$ENV{HTTPS_PKCS12_PASSWORD}; > $ctx->use_pkcs12_file($file ,$pass) || die("failed to load $file: $!"); Chee

Re: Problem building Openssl-0.9.8j with fips

2009-01-14 Thread Dr. Stephen Henson
On Tue, Jan 13, 2009, Justin A wrote: > Dr. Stephen, > > Thanks for your reply. After changing to what you have mentioned I am getting > this security error during linking. > > > ===Error log === > C:\openssl-0.9.8j>nmake -f ms\nt.mak > > Microsoft (R) Program Maintenance Utility   Version 7.

Client-Authentication using Crypt::SSLeay

2009-01-14 Thread Olaf Gellert
I am trying to open an SSL connection with Client Authentication using Crypt::SSLeay. What works fine is specifying environment variables HTTPS_CERT_FILE and HTTPS_KEY_FILE. Unfortunately the keyfile has to be unencrypted (there seems to be no no password mechanism for HTTPS_KEY_FILE). When I try

Re: Problem building Openssl-0.9.8j with fips

2009-01-14 Thread Dr. Stephen Henson
On Tue, Jan 13, 2009, Blasdel, Jerry wrote: > Fips - > > bash-3.00$ ./config -t > Operating system: sun4u-whatever-solaris2 > Configuring for solaris64-sparcv9-cc > /usr/bin/perl ./Configure solaris64-sparcv9-cc > /WWW/netuser/GTSAPU/build/extract/openssl-fips/openssl-fips-1.2 > > Openssl - >

Re: OpenSSL 0.9.8j build problem on ia64 SuSE 9.2

2009-01-14 Thread Dr. Stephen Henson
On Tue, Jan 13, 2009, Mark Lavi wrote: > On Tue, Jan 13, 2009, Dr. Stephen Henson wrote: > > >In these three lines in crypto/sha/Makefile: > > (cd asm; $(PERL) sha1-ia64.pl ../$@ $(CFLAGS)) > > (cd asm; $(PERL) sha512-ia64.pl ../$@ $(CFLAGS)) > > (cd asm; $(PERL) sha512-ia64.pl ../$@ $(CFLAGS)) >

Re: OpenSSL 0.9.8j build problem on ia64 SuSE 9.2

2009-01-14 Thread Lutz Jaenicke
Mark Lavi wrote: > On Tue, Jan 13, 2009, Dr. Stephen Henson wrote: > > >> In these three lines in crypto/sha/Makefile: >> (cd asm; $(PERL) sha1-ia64.pl ../$@ $(CFLAGS)) >> (cd asm; $(PERL) sha512-ia64.pl ../$@ $(CFLAGS)) >> (cd asm; $(PERL) sha512-ia64.pl ../$@ $(CFLAGS)) >> >> Try changing ../$