Re: 3 failures with Openssl 3 alpha

Thomas Dwyer III <[email protected]> Wed, 7 Oct 2020 09:54:48 -0700
Newsgroups gmane.comp.encryption.openssl.user,gmane.comp.encryption.openssl.devel
Message-ID <CADqc48TZa38jOMrCg9j++jCMtxkC2LupaCC=fB-h2JUSy=0gJw@mail.gmail.com>
--000000000000728a6d05b11793bd
Content-Type: text/plain; charset="UTF-8"

On Wed, Oct 7, 2020 at 7:33 AM The Doctor <doctor-Skx+k2Pw7SMBTvEkyID1hvd9D2ou9A/[email protected]> wrote:

> 1) The openssh project does not work  openssh 8.4+
>

This is a problem with the openssh codebase and not with openssl. You asked
<https://lists.mindrot.org/pipermail/openssh-unix-dev/2020-July/038686.html>
about this in openssh-unix-dev back in July. I posted this reply
<https://lists.mindrot.org/pipermail/openssh-unix-dev/2020-August/038737.html>
in August. The issue is that openssh needs the "current" IV state (which
the now-deprecated EVP_CIPHER_CTX_iv() used to return) but it's calling the
wrong openssl function to obtain it. See PR #12233
<https://github.com/openssl/openssl/pull/12233> for additional discussion.


Regards,
Tom.III



> 2) Rust and OPEnssl 3 are not agrreing
>
> 3) ca_root_nss project and openssl 3 have a difference of opinion.
>
> --
> Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@
> nl2k.ab.ca
> Yahweh, Queen & country!Never Satan President Republic!Beware AntiChrist
> rising!
> Look at Psalms 14 and 53 on Atheism
> https://www.empire.kred/ROOTNK?t=94a1f39b
> BC save the Province; on 24 October 2020, vote Liberal and not NDP!
>

--000000000000728a6d05b11793bd
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail=
_attr">On Wed, Oct 7, 2020 at 7:33 AM The Doctor &lt;<a href=3D"mailto:doct=
or-Skx+k2Pw7SMBTvEkyID1hvd9D2ou9A/[email protected]" target=3D"_blank">doctor-Skx+k2Pw7SMBTvEkyID1hvd9D2ou9A/[email protected]</a>&gt; wr=
ote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px=
 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">1) The open=
ssh project does not work=C2=A0 openssh 8.4+<br></blockquote><div><br></div=
><div>This is a problem with the openssh codebase and not with openssl. You=
 <a href=3D"https://lists.mindrot.org/pipermail/openssh-unix-dev/2020-July/=
038686.html">asked</a> about this in openssh-unix-dev back in July. I poste=
d <a href=3D"https://lists.mindrot.org/pipermail/openssh-unix-dev/2020-Augu=
st/038737.html">this reply</a> in August. The issue is that openssh needs t=
he &quot;current&quot; IV state (which the now-deprecated EVP_CIPHER_CTX_iv=
() used to return) but it&#39;s calling the wrong openssl function to obtai=
n it. See PR <a href=3D"https://github.com/openssl/openssl/pull/12233" targ=
et=3D"_blank">#12233</a> for additional discussion.</div><div><br></div><di=
v><br></div><div>Regards,<br></div><div>Tom.III</div><div><br></div><div> <=
br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8e=
x;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<br>
2) Rust and OPEnssl 3 are not agrreing<br>
<br>
3) ca_root_nss project and openssl 3 have a difference of opinion.<br>
<br>
-- <br>
Member - Liberal International This is doctor@@<a href=3D"http://nl2k.ab.ca=
" rel=3D"noreferrer" target=3D"_blank">nl2k.ab.ca</a> Ici doctor@@<a href=
=3D"http://nl2k.ab.ca" rel=3D"noreferrer" target=3D"_blank">nl2k.ab.ca</a><=
br>
Yahweh, Queen &amp; country!Never Satan President Republic!Beware AntiChris=
t rising!<br>
Look at Psalms 14 and 53 on Atheism <a href=3D"https://www.empire.kred/ROOT=
NK?t=3D94a1f39b" rel=3D"noreferrer" target=3D"_blank">https://www.empire.kr=
ed/ROOTNK?t=3D94a1f39b</a>=C2=A0 <br>
BC save the Province; on 24 October 2020, vote Liberal and not NDP!<br>
</blockquote></div></div>

--000000000000728a6d05b11793bd--