[openssl-users] Minor portability fix for Solaris-11.1

2015-07-01 Thread Karl Vogel
Greetings: I ran into a minor test problem when building OpenSSL-1.0.2c. Host: me% uname -a SunOS myname 5.11 11.1 i86pc i386 i86pc Solaris Compiler: me% gcc -v Target: i386-pc-solaris2.11 Thread model: posix gcc version 4.5.2 (GCC) Configuration: CC=gcc;

[openssl-users] Token Binding Extension?

2015-07-01 Thread Jeffrey Walton
Does OpenSSL implement the Token Binding extension? https://tools.ietf.org/html/draft-ietf-tokbind-protocol Token Binding finds its roots in Origin Bound Certificates (https://www.usenix.org/system/files/conference/usenixsecurity12/sec12-final162.pdf). I'm also aware of some related, independent

Re: [openssl-users] libtlssep

2015-07-01 Thread Jeffrey Walton
On Tue, Jun 30, 2015 at 9:55 AM, W. Michael Petullo wrote: > Dear OpenSSL community, > > I am writing to introduce a new TLS library which presently makes use > of OpenSSL: libtlssep. Libtlssep has two aims: (1) to provide a simpler > API to application developers and (2) to encourage the decompos

Re: [openssl-users] libtlssep

2015-07-01 Thread Salz, Rich
> I am writing to introduce a new TLS library which presently makes use of > OpenSSL: libtlssep. Libtlssep has two aims: (1) to provide a simpler API to > application developers and (2) to encourage the decomposition of > applications into at least two processes, one of which isolates access to > s

Re: [openssl-users] Alternatives to flat text file database back-end?

2015-07-01 Thread Kurt Roeckx
On Wed, Jul 01, 2015 at 01:38:28PM +0300, Ikonta wrote: > Hi everybody, > > Possibly stupid question: > The default and only known for me OpenSSL database format is flat text file > (afair index.txt in default openssl.cnf). > Was ever suggested an idea to provide some alternatives (maybe relation

[openssl-users] Alternatives to flat text file database back-end?

2015-07-01 Thread Ikonta
Hi everybody, Possibly stupid question: The default and only known for me OpenSSL database format is flat text file (afair index.txt in default openssl.cnf). Was ever suggested an idea to provide some alternatives (maybe relational (SQL) database server, or sqlite, or LDAP)? What can I read (or

Re: [openssl-users] libtlssep

2015-07-01 Thread Richard Moore
On 30 June 2015 at 14:55, W. Michael Petullo wrote: > and a research prototype at: > > https://www.flyn.org/projects/libtlssep/ > The libtlssep website. > > We would love to hear any constructive comments you might have, and would > be interested in hearing about any possibility for futur