[openssl.org #1015] don't use O_NOFOLLOW on Solaris...

OpenSSL version 0.9.7e
OS: Solaris x86 R10 (and every solaris, at least those with O_NOFOLLOW)

Trying to open /dev/random or /dev/urandom with O_NOFOLLOW doesn't work 
under Solaris, as everything under /dev/ is usually a symlink to the 
/devices/ tree.

-rob

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev <at> openssl.org
Automated List Manager                           majordomo <at> openssl.org

[openssl.org #1016] patches for Configure and config for Cray X1 systems

i'd thought i submitted these changes when i was still a Cray employee, 
but i note that the changes are not in the current openssl code, so i'm 
presenting the patches at this time (mostly because i'm tired of 
maintaining them locally :)

please make the following changes to config and Configure to handle the 
X1 architecture (this patch was based on version 0.9.7e).

*** Configure.orig      Mon Feb 28 12:04:53 2005
--- Configure   Mon Feb 28 16:09:40 2005
***************
*** 481,486 ****
--- 481,491 ----
   # did not like it.
   "cray-t3e", "cc: -DBIT_FIELD_LIMITS 
-DTERMIOS::(unknown):CRAY::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT:::",

+ #
+ # Cray X1 and similar (ARSC, palm <at> arsc.edu)
+ #
+ "cray-craynv", "cc: -h command -DBIT_FIELD_LIMITS 
-DTERMIOS::(unknown):CRAY::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT:::",
+
   # DGUX, 88100.
   "dgux-R3-gcc",        "gcc:-O3 
-fomit-frame-pointer::(unknown):::RC4_INDEX DES_UNROLL:::",
   "dgux-R4-gcc",        "gcc:-O3 -fomit-frame-pointer::(unknown)::-lnsl 
-lsocket:RC4_INDEX DES_UNROLL:::",

ubsec hw accelerator and DMA Error

RE: ubsec hw accelerator and DMA Error

Hi,

I have no knowledge of VXWorks platform, but we encoutered the same problem when coding a linux driver for
BCM chip.
We encouter this on slow machine, with slow PCI and around 128 Mb of RAM, when stressing the driver.
In fact the driver create all kernel structure and allocate memory faster than it can free it, producing
this DMA error.

Do you have this ERROR when stressing the driver?

Hope it could help.

Fred

-----Original Message-----
From:	owner-openssl-dev <at> openssl.org on behalf of Prashant Kumar
Sent:	Tue 3/1/2005 9:43 PM
To:	openssl-users <at> openssl.org; openssl-dev <at> openssl.org
Cc:	
Subject:	ubsec hw accelerator and DMA Error
Hello All,

I am trying to use ubsec hw accelerator with openssl and I get a DMA Error from the UBSEC when I try to run the
function "ubsec_mod_exp". Any idea ? I am running this on a VXWORKS platform.

Any help is appreciated.

Thank you,
Prashant.

  _____  

Do you Yahoo!?
Yahoo! Mail - Find what you need with new enhanced search. Learn more.
<http://us.rd.yahoo.com/evt=29917/*http://info.mail.yahoo.com/mail_250> 

RE: ubsec hw accelerator and DMA Error

rsync://dev.openssl.org busy?

I've been trying to access the OpenSSL CVS repository for the
past couple of days (including odd hours), with no success:

$ rsync rsync://dev.openssl.org/openssl-cvs
 <at> ERROR: max connections (20) reached - try again later
rsync: connection unexpectedly closed (0 bytes received so far) [receiver]
rsync error: error in rsync protocol data stream (code 12) at io.c(359)

Any thoughts?
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev <at> openssl.org
Automated List Manager                           majordomo <at> openssl.org

RE: [openssl.org #1015] don't use O_NOFOLLOW on Solaris...

Rob,

  Where is O_NOFOLLOW used in OpenSSL version 0.9.7e?

Ted

> -----Original Message-----
> From: owner-openssl-dev <at> openssl.org
> [mailto:owner-openssl-dev <at> openssl.org]On Behalf Of Robert Banz via RT
> Sent: Tuesday, March 01, 2005 12:44 AM
> Cc: openssl-dev <at> openssl.org
> Subject: [openssl.org #1015] don't use O_NOFOLLOW on Solaris...
>
>
>
>
> OpenSSL version 0.9.7e
> OS: Solaris x86 R10 (and every solaris, at least those with O_NOFOLLOW)
>
> Trying to open /dev/random or /dev/urandom with O_NOFOLLOW
> doesn't work
> under Solaris, as everything under /dev/ is usually a symlink to the
> /devices/ tree.
>
> -rob
>
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> Development Mailing List                       openssl-dev <at> openssl.org
> Automated List Manager                           majordomo <at> openssl.org
>

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev <at> openssl.org
Automated List Manager                           majordomo <at> openssl.org

RE: ubsec hw accelerator and DMA Error

Hi,

You can also use openssl s_server tool to test your engine. ;)

regards

Fred

-----Original Message-----
From:	owner-openssl-dev <at> openssl.org on behalf of Prashant Kumar
Sent:	Tue 3/1/2005 11:05 PM
To:	openssl-dev <at> openssl.org
Cc:	
Subject:	RE: ubsec hw accelerator and DMA Error
Frederic,

I am not even stressing the driver. I have written a small SSL server program for testing my hardware
accelerator and I see this problem.

There may be some problem with the driver, let me dig more into it.

Thank you so much for your help. I will update you with my progress :).

Regards,
Prashant.

Frédéric Donnat <frederic.donnat <at> netsecureone.com> wrote:
Hi,

I have no knowledge of VXWorks platform, but we encoutered the same problem when coding a linux driver for
BCM chip.
We encouter this on slow machine, with slow PCI and around 128 Mb of RAM, when stressing the driver.
In fact the driver create all kernel structure and allocate memory faster than it can free it, producing
this DMA error.

Do you have this ERROR when stressing the driver?

Hope it could help.

Fred

-----Original Message-----
From: owner-openssl-dev <at> openssl.org on behalf of Prashant Kumar
Sent: Tue 3/1/2005 9:43 PM
To: openssl-users <at> openssl.org; openssl-dev <at> openssl.org
Cc: 
Subject: ubsec hw accelerator and DMA Error
Hello All,

I am trying to use ubsec hw accelerator with openssl and I get a DMA Error from the UBSEC when I try to run the
function "ubsec_mod_exp". Any idea ? I am running this on a VXWORKS platform.

Any help is appreciated.

Thank you,
Prashant.

_____ 

Do you Yahoo!?
Yahoo! Mail - Find what you need with new enhanced search. Learn more. 

> ATTACHMENT part 2 application/ms-tnef name=winmail.dat

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev <at> openssl.org
Automated List Manager                           majordomo <at> openssl.org

ASN1 misunderstanding

Hi,all.
Sorry for my english.
Please help me to clarify the using of  the such ASN1 structure in
RDNSequence and in SubjectDirectoryAttributes.
Why do they have different ASN1 structure, if they play the same role but in
different contexts.

For what reason there is  "SET OF"? OpenSSL always used only one SEQ in
every SET.
Why is it used?.If standart would  omit, what effect this can has?
    RDNSequence : := SEQUENCE OF RelativeDistinguishedName
     RelativeDistinguishedName : := SET OF AttributeTypeAndValue
     AttributeTypeAndValue: := SEQUENCE {
     type      AttributeType,
     value     AttributeValue}

 SubjectDirectoryAttributes ::=   SEQUENCE  SIZE  (1..MAX)  OF
Attribute
     Attribute ::= SEQUENCE {
     type      Attributetype,
     values    SET OF AttributeValue } Why "SET OF" is used exactly in this
place instead of  place of previous ASN1 Structure.
By the way, does OpenSSL support of "SubjectDirectoryAttributes"
extension?If not,In what the most painless way this can be done?

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev <at> openssl.org
Automated List Manager                           majordomo <at> openssl.org

RE: ubsec hw accelerator and DMA Error