RE: Need Clarification - Open SSL issues

2009-11-20 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Aswin Premachandran > Sent: Thursday, 19 November, 2009 03:12 > I downloaded the openssl tar ball from the site and generated lib files > (libeay32.lib and ssleay32.lib) using the command "nmake -f ms\nt.mak". You're supposed

RE: Getting started - d2i_PKCS12_fp: on Win

2009-11-20 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Tim Ward > Sent: Friday, 20 November, 2009 06:10 > > > It fails at the same point, the difference now being that the > libeay32.dll > function names are shown (rather than just addresses) in the stack > backtrace. I can't persuade VS2005 to

RE: how to decrypt a binary file which is encryptes by aes 256 cbc mode

2009-11-20 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of NaGaGo > Sent: Thursday, 19 November, 2009 02:02 > #include > #include > #include > #include > #include > #include > #define AES_BLOCK_SIZE 16 This is already in aes.h, you don't need to define it yourself. > > int main() > { > >

Re: New Babie-- Query on CVE-2009-3555..

2009-11-20 Thread Samuel123smith
Hi ALL, I did some studies on this patch. Gone through the OpenSSL CVS and find that http://cvs.openssl.org/chngview?cn=18791 http://cvs.openssl.org/chngview?cn=18794 patch went into OpenSSL 0.9.8l release and this patch is making renegotiation state to be in hang state. Where as http://cvs.

Re: New Babie-- Query on CVE-2009-3555

2009-11-20 Thread samuel smith
Hi ALL, I did some studies on this patch. Gone through the OpenSSL CVS and find that http://cvs.openssl.org/chngview?cn=18791 http://cvs.openssl.org/chngview?cn=18794 patch went in

Application crashes when trying to access X509 Certificate Extension returned by X509_get_ext method

2009-11-20 Thread Sanjay Bhat
Hi, Our application running in windows 2008 64-bit platform crashes when we try to access the data member of X509_EXTENSION returned by X509_get_ext(). We are using 0.9.8d version of openssl compiled for windows 64 bit platform. We are clueless why this is happening and are badly stuck wi

Re: Getting started - d2i_PKCS12_fp: on Win

2009-11-20 Thread Tim Ward
From: "Tim Ward" For debug, you need to generate and use a different .mak file; where you see the lines in do_{ms,masm,nasm}.bat that say perl util\mk1mf.pl (options) VC-WIN32 >makefile either add lines with 'debug' added to the options part and different makefiles (I use ntdbg.mak ntdlldbg.m

Re: Getting started - d2i_PKCS12_fp: on Win

2009-11-20 Thread Tim Ward
From: "Tim Ward" Trying to follow that through the sources myself it doesn't make any sense to me - the BIO_s_file I've found, in bss_file.c, simply returns a pointer, it doesn't make any call to setmode or anything else. OK ... looking at the disassembly that's because there's something abo

Re: New Babie-- Query on CVE-2009-3555

2009-11-20 Thread samuel smith
Sorry , I have mistyped the second patch .This is the patch http://cvs.openssl.org/chngview?cn=18790 which disconnection the connection . Please guide me, which patch should i use to apply to OpenSSL 0.9.8k Thanks Samuel

Re: Getting started - d2i_PKCS12_fp: on Win

2009-11-20 Thread Tim Ward
From: "Dave Thompson" To be clear: you are building OpenSSL *and* your app(s) with VC05? Yes. That should indeed work for release. Check your ms\nt[dll].mak and you should see /MD on everything. It works for the pkread.c sample in release build. My real application fails silently in rele

New Babie-- Query on CVE-2009-3555

2009-11-20 Thread Samuel123smith
Hi ALL, I am newbie to openssl and i have recently joined in openssl activities.As we all know , we have come across the security vulnerability issue CVE-2009-3555 and i need to patch the OpenSSL 0.9.8k version. I was going from some of query already in this forum . >From this link http://www.d