RE: No OPENSSL_Applink

2014-06-09 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of open...@comaxis.com > Sent: Saturday, June 07, 2014 09:35 > I am attempting to use the d2i_PKCS12_fp() API call in a Windows DLL > compiled with the multi-threaded (/MT) runtime library. On this call I > get the runtime error "OPENSSL_Uplink(03

no OPENSSL_Applink

2014-06-09 Thread openssl
An update to my question below: I am trying to do something - anything - to get d2i_PKCS12_fp() to work. I am now calling it from a new dll that is compiled with /MD. There is no change. Here is my code: #include CRYPTO_malloc_init(); OpenSSL_add_all_algorithms(); fptr = fopen(p12_f

Re: Build OpenSSL in Win CE 8.0 (Compact 2013)

2014-06-09 Thread Pierre DELAAGE
As far as I can tell, by checking online doc from MSDN about WCE 2013 and Windows Embedded CE 6.0 (for Win7 based devices), it <<>> that you MAY not need everything brought by wcecompat IF you use VS 2013. But if you use previous VS versions, you still need wcecompat. for Windows Embedded Com

OpenSSL Vulnerability CVE-2014-0195

2014-06-09 Thread Jaya Nageswar
Hi All, We are currently using openssl 0.9.8 h version in one of our components. I would like to get some additional information about the vulnerability “DTLS invalid fragment vulnerability (CVE-2014-0195)”. I could get the information about all other vulnerabilities that are fixed in 0.9.8 za exc

OpenSSL Vulnerability CVE-2014-0195

2014-06-09 Thread Jaya Nageswar
Hi All, We are currently using openssl 0.9.8 h version in one of our components. I would like to get some additional information about the vulnerability “DTLS invalid fragment vulnerability (CVE-2014-0195)”. I could get the information about all other vulnerabilities that are fixed in 0.9.8 za exc

stunnel 5.02 released

2014-06-09 Thread Michal Trojnara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dear Users, I have released version 5.02 of stunnel. The ChangeLog entry: Version 5.02, 2014.06.09, urgency: HIGH: * Security bugfixes - OpenSSL DLLs updated to version 1.0.1h. See http://www.openssl.org/news/secadv_20140605.txt * New features

DTLS PSK

2014-06-09 Thread Lars Lavén
Hi, We are using OpenSSL DTLS in PSK mode and we are wondering if using PSK mode means that we are not vulnerable for CVE-2014-0224. I have seen that the fix in the code is that you now check that the master key length is not zero. Kind regards, Lars Lavén

Re: Build OpenSSL in Win CE 8.0 (Compact 2013)

2014-06-09 Thread Gottfrid
I seem to get the same errors. Since wcecompat plugs the holes in the eMbedded Visual C++ C Runtime Library. Is it actually needed in CE8.0 and the new compiler? -- View this message in context: http://openssl.6102.n7.nabble.com/Build-OpenSSL-in-Win-CE-8-0-Compact-2013-tp50585p50738.html Sent

Query reg multiple CA-Cert in list with same subject

2014-06-09 Thread Mukesh Yadav
Hi, I have a query for Ca-Cert list. If at gateway we have configured two CA-certs A1 and A2 both having same subject and content except time-stamp of generation. If peer sends Cert matching to A2, gateway tries to validate it with A1(subject being same and configured first in list) and validatio

Re: RSA_check_key failure 0x407b093 (value missing)

2014-06-09 Thread Tim Hudson
On 8/06/2014 8:18 PM, Mounir IDRASSI wrote: > On 6/8/2014 1:46 AM, Jeffrey Walton wrote: >> OK, does the library provide the CRT solver (I don't believe so, but I >> thought I would ask). > Few years ago, I needed such solver to convert from RSA SFM format > (n,e,d) to CRT representation. Obviously