Re: openssl hmac and key on the command line

On 6/8/2024 5:12 AM, Neil Horman wrote: printf '%s' "hello" | LD_LIBRARY_PATH=$PWD ./apps/openssl dgst -sha1 -hmac $(cat key.txt) SHA1(stdin)= c3b424548c3dbd02161a9541d89287e689f076d7 That will expose the key in the process args, so is NOT secure. -- Carson

Re: Best Practices for private key files handling

On 9/15/2022 3:15 PM, Shawn Heisey via openssl-users wrote: If symlinks are used responsibly, they won't have security risks. In general, if the program checks the ownership and permissions of the actual file before using it, it shouldn't matter whether there is a symlink or not. As long as

Re: [openssl-users] OpenSSL 1.0.2 Solaris 32 bit build is broken

On 4/16/15 1:49 PM, Viktor Dukhovni wrote: Somewhat (Solaris) related question: * Do you have access to any SunOS 5.10 systems? * If you do, can you check whether /bin/sh supports the POSIX "export" built-in syntax: export NAME=value or does one have to write

Re: [openssl-users] OpenSSL 1.0.2 Solaris 32 bit build is broken

As a counter-example, I just built OpenSSL 1.0.2a 32-bit on SPARC and 'make test' is just fine. Host: Sun Fire v490 Compiler: Solaris Studio 12.2 OS: Solaris 10 u9 Configure args: solaris-sparcv9-cc So I suspect the OP is suffering from some local issue. -- Carson

Re: [openssl-users] OpenSSL 1.0.2 Solaris 32 bit build is broken

On 4/15/15 4:59 AM, Jeffrey Walton wrote: Can you try with a different compiler? Is Clang available to you? (If not, I can provide you with a script or recipe to build it). Here's what one person was just saying about Sun's compiler on another list. He maintains another crypto-toolkit: ... gh

Re: References to NSS libraries

On 1/8/13 9:52 AM, Jeffrey Walton wrote: That seems like a really odd requirement. Is there any reading on the topic? man nsswitch.conf Generally, I prefer static linking in high integrity software. And I oppose "plug-in" like functionality. Then you need to not run on Linux or Solaris, or

AES speed regression in 1.0.0-stable-SNAP-20090705

After compiling 1.0.0-stable-SNAP-20090705 I ran a couple of "openssl speed aes" runs to lightly test the new code, and discovered a massive slowdown in small bytesize AES compared to 0.9.8k, in some cases more than 50%. Is this known / expected? SunOS gandalf 5.10 Generic_138889-08 i86pc i386

Why are man pages installed under openssldir, and not under prefix?

This has long been "odd" behaviour in OpenSSL. If I do: ./Configure solaris64-x86_64-cc enable-shared --prefix=/Tools/SunOS_5.10_i86pc_amd64/openssl-0.9.8k --openssldir=/var/openssl man pages get installed in /var/openssl/man. That's just... bizarre. Is there some reason that MANDIR and HTML

Re: Problem making shared libraries on Solaris

Joseph Felten wrote: Has anyone out there managed to compile openssl-0.9.8g shared libraries under Solaris 8? I've tried both gcc version 3.4.6 and the Sun Studio 11 Sparc compiler (the installation of which was an odyssey unto itself) and both puke on linking with the below error "relocations r

Re: Problem compiling openssl-0.9.8d on Solaris 8

Garey Mills wrote: Hi - Compiling with gcc I get this error: making all in crypto/ui... make[2]: Entering directory `/usr/local/src/openssl-0.9.8d/crypto/ui' cc -I.. -I../.. -I../../include -KPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -xtarget=ultra -xar

RE: renegotiating problem - connection hanging?

--On Wednesday, June 21, 2006 3:36 PM -0700 David Schwartz <[EMAIL PROTECTED]> wrote: The same problem occurs with one thread. Consider the following code, assume blocking sockets: 1) do some stuff 2) do a huge write, don't check for short writes since our socket is blocking That cod

Re: Solaris make install problems for 0.9.7e

--On Thursday, October 28, 2004 15:13:14 +0100 Robert Bannocks <[EMAIL PROTECTED]> wrote: I get this too if you quote the $(EXHEADER) to be "$(EXHEADER)" in the install section of the files listed below it compiles and installs ok. This will break if EXHEADER is _not_ empty. The following snippet

ASN.1 buffer overflows - is OpenSSL vulnerable?

The recently published SNMP vulnerabilities are mostly ASN.1 vulnerabilities. Has anyone reviewed the ASN.1 code, and OpenSSL's usage thereof, to see if there are any issues? -- Carson Gaspar - [EMAIL PROTECTED] Queen Trapped in a Butch

Solaris gcc shared library target is broken in 0.9.6a

\1:solaris-shared:\2,' Configure >Configure.fixed We only noticed when we tried to compile under 2.5.1 (don't ask...) which isn't supported by the current Sun cc. Sorry I didn't catch this in the release candidates. -- Carson Gaspar - [EMA

Re: Build fails on Solaris 5.6

/crypto or make sure > your path includes the current directory. If the make process requires . to be in your PATH, it's broken and should be fixed. I don't think it does, though, since my PATH does _not_ contain ., and 0.9.6 built just fine... -- Carson Gaspar -- [EMAIL PROTECT

Re: random generator on solaris

and then invokes gcc. It should work like a charm. -- Carson Gaspar - [EMAIL PROTECTED] __ OpenSSL Project http://www.openssl.org User Support Mailing List