Robert Banz via RT | 1 Mar 09:44 2005
Picon

[openssl.org #1015] don't use O_NOFOLLOW on Solaris...


OpenSSL version 0.9.7e
OS: Solaris x86 R10 (and every solaris, at least those with O_NOFOLLOW)

Trying to open /dev/random or /dev/urandom with O_NOFOLLOW doesn't work 
under Solaris, as everything under /dev/ is usually a symlink to the 
/devices/ tree.

-rob

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev <at> openssl.org
Automated List Manager                           majordomo <at> openssl.org

Wendy Palm via RT | 1 Mar 09:44 2005
Picon

[openssl.org #1016] patches for Configure and config for Cray X1 systems


i'd thought i submitted these changes when i was still a Cray employee, 
but i note that the changes are not in the current openssl code, so i'm 
presenting the patches at this time (mostly because i'm tired of 
maintaining them locally :)

please make the following changes to config and Configure to handle the 
X1 architecture (this patch was based on version 0.9.7e).

*** Configure.orig      Mon Feb 28 12:04:53 2005
--- Configure   Mon Feb 28 16:09:40 2005
***************
*** 481,486 ****
--- 481,491 ----
   # did not like it.
   "cray-t3e", "cc: -DBIT_FIELD_LIMITS 
-DTERMIOS::(unknown):CRAY::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT:::",

+ #
+ # Cray X1 and similar (ARSC, palm <at> arsc.edu)
+ #
+ "cray-craynv", "cc: -h command -DBIT_FIELD_LIMITS 
-DTERMIOS::(unknown):CRAY::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT:::",
+
   # DGUX, 88100.
   "dgux-R3-gcc",        "gcc:-O3 
-fomit-frame-pointer::(unknown):::RC4_INDEX DES_UNROLL:::",
   "dgux-R4-gcc",        "gcc:-O3 -fomit-frame-pointer::(unknown)::-lnsl 
-lsocket:RC4_INDEX DES_UNROLL:::",

(Continue reading)

Prashant Kumar | 1 Mar 21:43 2005
Picon

ubsec hw accelerator and DMA Error

Hello All,
 
I am trying to use ubsec hw accelerator with openssl and I get a DMA Error from the UBSEC when I try to run the function "ubsec_mod_exp". Any idea ? I am running this on a VXWORKS platform.
 
Any help is appreciated.
 
Thank you,
Prashant.
 
 

Do you Yahoo!?
Yahoo! Mail - Find what you need with new enhanced search. Learn more.
Frédéric Donnat | 1 Mar 22:50 2005

RE: ubsec hw accelerator and DMA Error

Hi,

I have no knowledge of VXWorks platform, but we encoutered the same problem when coding a linux driver for
BCM chip.
We encouter this on slow machine, with slow PCI and around 128 Mb of RAM, when stressing the driver.
In fact the driver create all kernel structure and allocate memory faster than it can free it, producing
this DMA error.

Do you have this ERROR when stressing the driver?

Hope it could help.

Fred

-----Original Message-----
From:	owner-openssl-dev <at> openssl.org on behalf of Prashant Kumar
Sent:	Tue 3/1/2005 9:43 PM
To:	openssl-users <at> openssl.org; openssl-dev <at> openssl.org
Cc:	
Subject:	ubsec hw accelerator and DMA Error
Hello All,

I am trying to use ubsec hw accelerator with openssl and I get a DMA Error from the UBSEC when I try to run the
function "ubsec_mod_exp". Any idea ? I am running this on a VXWORKS platform.

Any help is appreciated.

Thank you,
Prashant.

  _____  

Do you Yahoo!?
Yahoo! Mail - Find what you need with new enhanced search. Learn more.
<http://us.rd.yahoo.com/evt=29917/*http://info.mail.yahoo.com/mail_250> 

Attachment (winmail.dat): application/ms-tnef, 4134 bytes
Prashant Kumar | 1 Mar 23:05 2005
Picon

RE: ubsec hw accelerator and DMA Error

Frederic,
 
I am not even stressing the driver. I have written a small SSL server program for testing my hardware accelerator and I see this problem.
 
There may be some problem with the driver, let me dig more into it.
 
Thank you so much for your help. I will update you with my progress :).
 
Regards,
Prashant.

Fr éric Donnat <frederic.donnat <at> netsecureone.com> wrote:
Hi,

I have no knowledge of VXWorks platform, but we encoutered the same problem when coding a linux driver for BCM chip.
We encouter this on slow machine, with slow PCI and around 128 Mb of RAM, when stressing the driver.
In fact the driver create all kernel structure and allocate memory faster than it can free it, producing this DMA error.

Do you have this ERROR when stressing the driver?

Hope it could help.

Fred


-----Original Message-----
From: owner-openssl-dev <at> openssl.org on behalf of Prashant Kumar
Sent: Tue 3/1/2005 9:43 PM
To: openssl-users <at> openssl.org; openssl-dev <at> openssl.org
Cc:
Subject: ubsec hw accelerator and DMA Error
Hello All,

I am trying to use ubsec hw accelerator with openssl and I get a DMA Error fro m the UBSEC when I try to run the function "ubsec_mod_exp". Any idea ? I am running this o n a VXWORKS platform.

Any help is appreciated.

Thank you,
Prashant.




_____

Do you Yahoo!?
Yahoo! Mail - Find what you need with new enhanced search. Learn more.




> ATTACHMENT part 2 application/ms-tnef name=winmail.dat

__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com

nagendra modadugu | 1 Mar 23:59 2005
Picon

rsync://dev.openssl.org busy?


I've been trying to access the OpenSSL CVS repository for the
past couple of days (including odd hours), with no success:

$ rsync rsync://dev.openssl.org/openssl-cvs
 <at> ERROR: max connections (20) reached - try again later
rsync: connection unexpectedly closed (0 bytes received so far) [receiver]
rsync error: error in rsync protocol data stream (code 12) at io.c(359)

Any thoughts?
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev <at> openssl.org
Automated List Manager                           majordomo <at> openssl.org

Ted Mittelstaedt | 2 Mar 02:08 2005

RE: [openssl.org #1015] don't use O_NOFOLLOW on Solaris...

Rob,

  Where is O_NOFOLLOW used in OpenSSL version 0.9.7e?

Ted

> -----Original Message-----
> From: owner-openssl-dev <at> openssl.org
> [mailto:owner-openssl-dev <at> openssl.org]On Behalf Of Robert Banz via RT
> Sent: Tuesday, March 01, 2005 12:44 AM
> Cc: openssl-dev <at> openssl.org
> Subject: [openssl.org #1015] don't use O_NOFOLLOW on Solaris...
>
>
>
>
> OpenSSL version 0.9.7e
> OS: Solaris x86 R10 (and every solaris, at least those with O_NOFOLLOW)
>
> Trying to open /dev/random or /dev/urandom with O_NOFOLLOW
> doesn't work
> under Solaris, as everything under /dev/ is usually a symlink to the
> /devices/ tree.
>
> -rob
>
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> Development Mailing List                       openssl-dev <at> openssl.org
> Automated List Manager                           majordomo <at> openssl.org
>

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev <at> openssl.org
Automated List Manager                           majordomo <at> openssl.org

Frédéric Donnat | 2 Mar 17:52 2005

RE: ubsec hw accelerator and DMA Error

Hi,

You can also use openssl s_server tool to test your engine. ;)

regards

Fred

-----Original Message-----
From:	owner-openssl-dev <at> openssl.org on behalf of Prashant Kumar
Sent:	Tue 3/1/2005 11:05 PM
To:	openssl-dev <at> openssl.org
Cc:	
Subject:	RE: ubsec hw accelerator and DMA Error
Frederic,

I am not even stressing the driver. I have written a small SSL server program for testing my hardware
accelerator and I see this problem.

There may be some problem with the driver, let me dig more into it.

Thank you so much for your help. I will update you with my progress :).

Regards,
Prashant.

Frédéric Donnat <frederic.donnat <at> netsecureone.com> wrote:
Hi,

I have no knowledge of VXWorks platform, but we encoutered the same problem when coding a linux driver for
BCM chip.
We encouter this on slow machine, with slow PCI and around 128 Mb of RAM, when stressing the driver.
In fact the driver create all kernel structure and allocate memory faster than it can free it, producing
this DMA error.

Do you have this ERROR when stressing the driver?

Hope it could help.

Fred

-----Original Message-----
From: owner-openssl-dev <at> openssl.org on behalf of Prashant Kumar
Sent: Tue 3/1/2005 9:43 PM
To: openssl-users <at> openssl.org; openssl-dev <at> openssl.org
Cc: 
Subject: ubsec hw accelerator and DMA Error
Hello All,

I am trying to use ubsec hw accelerator with openssl and I get a DMA Error from the UBSEC when I try to run the
function "ubsec_mod_exp". Any idea ? I am running this on a VXWORKS platform.

Any help is appreciated.

Thank you,
Prashant.

_____ 

Do you Yahoo!?
Yahoo! Mail - Find what you need with new enhanced search. Learn more. 

> ATTACHMENT part 2 application/ms-tnef name=winmail.dat

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev <at> openssl.org
Automated List Manager                           majordomo <at> openssl.org

Zerg | 2 Mar 17:54 2005
Picon

ASN1 misunderstanding

Hi,all.
Sorry for my english.
Please help me to clarify the using of  the such ASN1 structure in
RDNSequence and in SubjectDirectoryAttributes.
Why do they have different ASN1 structure, if they play the same role but in
different contexts.

For what reason there is  "SET OF"? OpenSSL always used only one SEQ in
every SET.
Why is it used?.If standart would  omit, what effect this can has?
    RDNSequence : := SEQUENCE OF RelativeDistinguishedName
     RelativeDistinguishedName : := SET OF AttributeTypeAndValue
     AttributeTypeAndValue: := SEQUENCE {
     type      AttributeType,
     value     AttributeValue}

 SubjectDirectoryAttributes ::=   SEQUENCE  SIZE  (1..MAX)  OF
Attribute
     Attribute ::= SEQUENCE {
     type      Attributetype,
     values    SET OF AttributeValue } Why "SET OF" is used exactly in this
place instead of  place of previous ASN1 Structure.
By the way, does OpenSSL support of "SubjectDirectoryAttributes"
extension?If not,In what the most painless way this can be done?

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev <at> openssl.org
Automated List Manager                           majordomo <at> openssl.org

Prashant Kumar | 2 Mar 21:27 2005
Picon

RE: ubsec hw accelerator and DMA Error

Frederic,
 
Thank you for your input. I was wondering how did you guys fix the problem in the driver if it is not freeing up the memory fast enough? If the information is propriatary, never mind.
 
Thank you again for your help.

Regards,
Prashant.

Fr éric Donnat <frederic.donnat <at> netsecureone.com> wrote:
Hi,

You can also use openssl s_server tool to test your engine. ;)

regards

Fred


-----Original Message-----
From: owner-openssl-dev <at> openssl.org on behalf of Prashant Kumar
Sent: Tue 3/1/2005 11:05 PM
To: openssl-dev <at> openssl.org
Cc:
Subject: RE: ubsec hw accelerator and DMA Error
Frederic,

I am not even stressing the driver. I have written a small SSL server program for testing my hardware accelerator and I see this problem.

There may be some problem with the driver, let me dig more into it.

Thank you so much for your help. I will update you with my progress :).

Regards,
Prashant.

Frédéric Donnat wrote:
Hi,

I have no knowledge of VXWorks platform, but we encou tered the same problem when coding a linux driver for BCM chip.
We encouter this on slo w machine, with slow PCI and around 128 Mb of RAM, when stressing the driver.
In fact the driver create all kernel structure and allocate memory faster than it can free it, producing this DMA error.

Do you have this ERROR when stressing the driver?

Hope it could help.

Fred


-----Original Message-----
From: owner-openssl-dev <at> openssl.org on behalf of Prashant Kumar
Sent: Tue 3/1/2005 9:43 PM
To: openssl-users <at> openssl.org; openssl-dev <at> openssl.org
Cc:
Subject: ubsec hw accelerator and DMA Error
Hello All,

I am trying to use ubsec hw accelerator with openssl and I get a DMA Error from the UBSEC when I try to run the function "ubsec_mod_exp". Any idea ? I am running this on a VXWORKS platform.

Any help is appreciated.

Thank you,
Prashant.




_____

Do you Yahoo!?
Yahoo! Mail - Find what you ne ed with new enhanced search. Learn more.




> ATTACHMENT part 2 application/ms-tnef name=winmail.dat

__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com


______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List openssl-dev <at> openssl.org
Automated List Manager majordomo <at> openssl.org

Celebrate Yahoo!'s 10th Birthday!
Yahoo! Netrospective: 100 Moments of the Web

Gmane