Re: 3 failures with Openssl 3 alpha
Thomas Dwyer III <[email protected]> Wed, 7 Oct 2020 09:54:48 -0700
| Newsgroups | gmane.comp.encryption.openssl.user,gmane.comp.encryption.openssl.devel |
|---|---|
| Message-ID | <CADqc48TZa38jOMrCg9j++jCMtxkC2LupaCC=fB-h2JUSy=0gJw@mail.gmail.com> |
--000000000000728a6d05b11793bd Content-Type: text/plain; charset="UTF-8" On Wed, Oct 7, 2020 at 7:33 AM The Doctor <doctor-Skx+k2Pw7SMBTvEkyID1hvd9D2ou9A/[email protected]> wrote: > 1) The openssh project does not work openssh 8.4+ > This is a problem with the openssh codebase and not with openssl. You asked <https://lists.mindrot.org/pipermail/openssh-unix-dev/2020-July/038686.html> about this in openssh-unix-dev back in July. I posted this reply <https://lists.mindrot.org/pipermail/openssh-unix-dev/2020-August/038737.html> in August. The issue is that openssh needs the "current" IV state (which the now-deprecated EVP_CIPHER_CTX_iv() used to return) but it's calling the wrong openssl function to obtain it. See PR #12233 <https://github.com/openssl/openssl/pull/12233> for additional discussion. Regards, Tom.III > 2) Rust and OPEnssl 3 are not agrreing > > 3) ca_root_nss project and openssl 3 have a difference of opinion. > > -- > Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@ > nl2k.ab.ca > Yahweh, Queen & country!Never Satan President Republic!Beware AntiChrist > rising! > Look at Psalms 14 and 53 on Atheism > https://www.empire.kred/ROOTNK?t=94a1f39b > BC save the Province; on 24 October 2020, vote Liberal and not NDP! > --000000000000728a6d05b11793bd Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail= _attr">On Wed, Oct 7, 2020 at 7:33 AM The Doctor <<a href=3D"mailto:doct= or-Skx+k2Pw7SMBTvEkyID1hvd9D2ou9A/[email protected]" target=3D"_blank">doctor-Skx+k2Pw7SMBTvEkyID1hvd9D2ou9A/[email protected]</a>> wr= ote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px= 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">1) The open= ssh project does not work=C2=A0 openssh 8.4+<br></blockquote><div><br></div= ><div>This is a problem with the openssh codebase and not with openssl. You= <a href=3D"https://lists.mindrot.org/pipermail/openssh-unix-dev/2020-July/= 038686.html">asked</a> about this in openssh-unix-dev back in July. I poste= d <a href=3D"https://lists.mindrot.org/pipermail/openssh-unix-dev/2020-Augu= st/038737.html">this reply</a> in August. The issue is that openssh needs t= he "current" IV state (which the now-deprecated EVP_CIPHER_CTX_iv= () used to return) but it's calling the wrong openssl function to obtai= n it. See PR <a href=3D"https://github.com/openssl/openssl/pull/12233" targ= et=3D"_blank">#12233</a> for additional discussion.</div><div><br></div><di= v><br></div><div>Regards,<br></div><div>Tom.III</div><div><br></div><div> <= br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8e= x;border-left:1px solid rgb(204,204,204);padding-left:1ex"> <br> 2) Rust and OPEnssl 3 are not agrreing<br> <br> 3) ca_root_nss project and openssl 3 have a difference of opinion.<br> <br> -- <br> Member - Liberal International This is doctor@@<a href=3D"http://nl2k.ab.ca= " rel=3D"noreferrer" target=3D"_blank">nl2k.ab.ca</a> Ici doctor@@<a href= =3D"http://nl2k.ab.ca" rel=3D"noreferrer" target=3D"_blank">nl2k.ab.ca</a><= br> Yahweh, Queen & country!Never Satan President Republic!Beware AntiChris= t rising!<br> Look at Psalms 14 and 53 on Atheism <a href=3D"https://www.empire.kred/ROOT= NK?t=3D94a1f39b" rel=3D"noreferrer" target=3D"_blank">https://www.empire.kr= ed/ROOTNK?t=3D94a1f39b</a>=C2=A0 <br> BC save the Province; on 24 October 2020, vote Liberal and not NDP!<br> </blockquote></div></div> --000000000000728a6d05b11793bd--