Re: [openssl-users] [openssl-announce] OpenSSL version 1.0.1k released

2015-01-08 Thread Dongsheng Song
test failure on custom build: perl Configure ^ no-comp no-dso no-idea no-ssl2 no-ssl3 no-psk no-srp ^ --prefix=D:/var/pool/openssl-win32 ^ VC-WIN32 ... D:\var\tmp\openssl-1.0.1k>nmake -f ms\ntdll.mak ... D:\var\tmp\openssl-1.0.1k>nmake -f ms\nt.mak test Microsoft (R) Program Mainten

[openssl-users] How to construct certificate chain when missing intermediate CA

2015-01-08 Thread Jerry OELoo
Hi All: I am using X509_STORE_CTX_get1_chain() to get web site's full certificate chain. Now I am encounter an issue that some web site does not return intermediate CA certificate but only web site leaf certificate. For example. https://globaltrade.usbank.com Below is certificate I get. Subject:

Re: [openssl-users] What does EC_KEY_get0_public_key deliver?

2015-01-08 Thread Matt Caswell
On 09/01/15 00:05, Christian Weber wrote: > Thanks Matt, i just assumed the BIGNUMs were the coordinates without any > projection - obviously that assumption was wrong - mislead by the funtions > name. > What interests me is to how you accessed the BIGNUMs in the first place! The EC_POINT str

Re: [openssl-users] What does EC_KEY_get0_public_key deliver?

2015-01-08 Thread Christian Weber
Thanks Matt, i just assumed the BIGNUMs were the coordinates without any projection - obviously that assumption was wrong - mislead by the funtions name. However, we're operating on brainpool curves, so the latter function should do the job. I'll lookup the parameters and try tomorrow. MfG -- C

Re: [openssl-users] [Bulk] Build failure in 1.0.1k on Windows

2015-01-08 Thread Gisle Vanem
Perrow, Graeme wrote: I just downloaded 1.0.1k and when trying to build it on Windows (using Visual Studio 10.0), I get a compile error: .\crypto\cversion.c(80) : error C2065: 'cflags' : undeclared identifier .\crypto\cversion.c(80) : warning C4047: 'return' : 'const char *' differs in level

Re: [openssl-users] OpenSSL version 1.0.1k released

2015-01-08 Thread Scott Neugroschl
The C4047 is just a warning. The C2065 is a known issue, per Matt. -Original Message- From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf Of Kevin Layer Sent: Thursday, January 08, 2015 1:13 PM To: openssl-users@openssl.org Subject: Re: [openssl-users] OpenSSL versio

Re: [openssl-users] OpenSSL version 1.0.1k released

2015-01-08 Thread Kevin Layer
With a more modern 64-bit MS compiler, I still get a failure. I see that Cygwin released theirs, so I'm guessing this is a MS compiler issue. cl /Fotmp32dll\cversion.obj -Iinc32 -Itmp32dll /MD /Ox -DOPENSSL_THREADS -DDSO_WIN32 -W3 -Gs0 -Gy -nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_A

Re: [openssl-users] OpenSSL version 1.0.1k released

2015-01-08 Thread Kevin Layer
Anyone having trouble building on Windows? cl /Fotmp32dll\cversion.obj -Iinc32 -Itmp32dll /MD /Ox /O2 /Ob2 -DOPENSSL_THREADS -DDSO_WIN32 -W3 -Gs0 -GF -Gy -nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_MEAN -DL_ENDIAN -D_CRT_SECURE_NO_DEPRECATE -DOPENSSL_USE_APPLINK -I. -DOPENSSL_NO_

Re: [openssl-users] openssl-1.0.1k - undeclared identifier

2015-01-08 Thread Matt Caswell
On 08/01/15 18:19, Guy wrote: > Hello, > > I try to buld openssl-1.0.1k with Visual Studio... > > PERL Configure VC-WIN32... > ms\do_nasm > NMAKE -f ms\ntdll.mak > > and have one error: > > .\crypto\cversion.c(80) : error C2065: 'cflags' : undeclared identifier > This is a known is

Re: [openssl-users] What does EC_KEY_get0_public_key deliver?

2015-01-08 Thread Matt Caswell
On 08/01/15 17:16, Christian Weber wrote: > Dear OpenSSL-Users, > > recently i found a pitfall using EC_KEY_get0_public_key(key->pkey.ec). > The function just returns a copy to a pointer to key->pub_key which is a > EC_POINT pointer. > The key itself is taken from a certificate using EVP_PKEY *k

[openssl-users] Build failure in 1.0.1k on Windows

2015-01-08 Thread Perrow, Graeme
I just downloaded 1.0.1k and when trying to build it on Windows (using Visual Studio 10.0), I get a compile error: .\crypto\cversion.c(80) : error C2065: 'cflags' : undeclared identifier .\crypto\cversion.c(80) : warning C4047: 'return' : 'const char *' differs in levels of indirection from 'int

[openssl-users] What does EC_KEY_get0_public_key deliver?

2015-01-08 Thread Christian Weber
Dear OpenSSL-Users, recently i found a pitfall using EC_KEY_get0_public_key(key->pkey.ec). The function just returns a copy to a pointer to key->pub_key which is a EC_POINT pointer. The key itself is taken from a certificate using EVP_PKEY *key = X509_get_pubkey(cert); Fine, i assumed, these

[openssl-users] OpenSSL Security Advisory

2015-01-08 Thread OpenSSL
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL Security Advisory [08 Jan 2015] === DTLS segmentation fault in dtls1_get_record (CVE-2014-3571) === Severity: Moderate A carefully crafted DTLS messa

[openssl-users] OpenSSL version 1.0.1k released

2015-01-08 Thread OpenSSL
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 1.0.1k released === OpenSSL - The Open Source toolkit for SSL/TLS http://www.openssl.org/ The OpenSSL project team is pleased to announce the release of version 1.0.1k of our open source

[openssl-users] OpenSSL version 1.0.0p released

2015-01-08 Thread OpenSSL
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 1.0.0p released === OpenSSL - The Open Source toolkit for SSL/TLS http://www.openssl.org/ The OpenSSL project team is pleased to announce the release of version 1.0.0p of our open source

[openssl-users] OpenSSL version 0.9.8zd released

2015-01-08 Thread OpenSSL
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 0.9.8zd released === OpenSSL - The Open Source toolkit for SSL/TLS http://www.openssl.org/ The OpenSSL project team is pleased to announce the release of version 0.9.8zd of our open sourc