RE: SSL_CTX_set{_preferred)_cipher_list?

2013-05-11 Thread Salz, Rich
> > What is the difference between SSL_CTX_SET_cipher_list and > > SSL_CTX_set_preferred_cipher_list? > Which version of OpenSSL has the "preferred" version? I don't see this in > "master". Gaak. Sorry for the confusion. Looking at some decade-old local patches. :( /r$ -- Princip

RE: Remove SSLv2 via #ifdef

2013-05-11 Thread Salz, Rich
I guess I was confused, expecting to see the "ssl23" stuff removed as well, but I guess it's okay to leave it. -- Principal Security Engineer Akamai Technology Cambridge, MA __ OpenSSL Project

Re: TLS extensions

2013-05-11 Thread Jeremy Harris
On 05/06/2013 09:53 AM, Daniel W wrote: Hello everyone, i want to use TLS extensions. In fact the two extensions trusted_ca_key and status_request. Could someone explain me how this works on a little example or lead me to a tutorial or good documentation? Exim uses status_request; source at

Re: Self-signed certificates and keyUsage extension

2013-05-11 Thread Viktor Dukhovni
On Sat, May 11, 2013 at 10:49:40AM +0200, Stefan H. Holek wrote: > On 10.05.2013, at 18:48, no_spam...@yahoo.com wrote: > > > openssl verify -check_ss_sig -CAfile ./my-ss-cert.pem ./my-ss-cert.pem > > > > I get the following error: > > error 20 at 0 depth lookup:unable to get local issuer certi

Re: Trouble with Illegal instruction

2013-05-11 Thread Jakob Bohm
(This is a summary of the mail below, hence posted above it) Wauv! An original Pentium II, the first P6 model with MMX. I guess someone needs to recheck their assembler programming assumptions about which instructions are implied by the MMX CPUID bit. Note that this hardware (along with the P5

Re: Self-signed certificates and keyUsage extension

2013-05-11 Thread Stefan H. Holek
IIRC, this means that the Subject and Issuer names on your self-signed cert do not match. Stefan On 10.05.2013, at 18:48, no_spam...@yahoo.com wrote: > openssl verify -check_ss_sig -CAfile ./my-ss-cert.pem ./my-ss-cert.pem > > I get the following error: > error 20 at 0 depth lookup:unable to

Re: Remove SSLv2 via #ifdef

2013-05-11 Thread Jakob Bohm
On 10-05-2013 21:24, Salz, Rich wrote: Would there be any interest (and support) from the dev team for patches that completely remove SSLv2 API’s? /r$ Already there: ./Configure -no-ssl2 __ OpenSSL Project

Re: Defintion of OBJ_bsearch_pmeth()

2013-05-11 Thread Matt Caswell
On 11 May 2013 05:05, Lunar Mushrooms wrote: > Hello I can see a call to OBJ_bsearch_pmeth() in openssl source. By I could > not find the definition of OBJ_bsearch_pmeth(). I greped the entire source. > Can somebody help me to find the definition ? > > ./openssl-1.0.1d/crypto/evp/pmeth_lib.c:

Re: Trouble with Illegal instruction

2013-05-11 Thread Holger Bruenjes
Am 2013-05-11 02:45, schrieb Tom marchand: What platform is this running on? eistre:/ # uname -a Linux eistre 2.6.32-eisfair-1-SMP #1 SMP Thu Apr 4 17:26:28 CEST 2013 i686 i686 i386 GNU/Linux eistre:/ # /lib/libc.so.6 GNU C Library stable release version 2.8, by Roland McGrath et al. eistr