search for: evp_sha256

...tch. I think there's a small bug: > + if ((err = EVP_VerifyInit(&mdctx, EVP_ecdsa())) != 1) { > + ERR_error_string(ERR_get_error(), errorbuf); > + fatal("EVP_VerifyInit() failed: %s (reason: %s)", > + errorbuf, ERR_reason_error_string(err)); You should use "EVP_sha256()" instead of "EVP_ecdsa()" here (we have a ECDSA signature on the SHA256 hash) > + if ((err = EVP_VerifyFinal(&mdctx, walk, restlen, pkey)) == -1) { > + ERR_error_string(ERR_get_error(), errorbuf); > + error("Verifying the U2F registration signature failed: %s...

This commit message was supposed to be: - (djm) [configure.ac] Turn on -Wno-unused-result for gcc >= 4.4 to avoid silly warnings on write() calls we don't care succeed or not. I fixed the CVS log retrospectively On Wed, 12 Jan 2011, Damien Miller wrote: > CVSROOT: /var/cvs > Module name: openssh > Changes by: djm at fuyu.mindrot.org 11/01/12 13:34:04 >

Hello, I've updated sources but forgot to recreate configure so I've ended without #define HAVE_EVP_RIPEMD160 1 and ssh client ended with: OpenSSH_6.7p1, OpenSSL 1.0.1h-fips 5 Jun 2014 debug1: Reading configuration data ssh.config main: mux digest failed The problem was that ssh_digest_by_alg() couldn't verify alg with an index bigger than 1 since the line with SSH_DIGEST_RIPEMD160

...with sh winetricks dotnet20 Using system libcrypto, version 90709F DLSYM: Failed to resolve FIPS_mode_set: 127 DLSYM: Failed to resolve FIPS_mode: 127 DLSYM: Failed to resolve SHA256: 127 DLSYM: Failed to resolve SHA512: 127 DLSYM: Failed to resolve EVP_sha224: 127 DLSYM: Failed to resolve EVP_sha256: 127 DLSYM: Failed to resolve EVP_sha384: 127 DLSYM: Failed to resolve EVP_sha512: 127 fixme:toolhelp:CreateToolhelp32Snapshot Unimplemented: heap list snapshot fixme:toolhelp:Heap32ListFirst : stub fixme:ntoskrnl:KeInitializeSpinLock 0x110b60 Setting Windows version to win2k Executing wine rege...

...25519.o \ kexgexc.o kexgexs.o \ diff --git a/configure.ac b/configure.ac index 016c96472d15..00bb4132adb7 100644 --- a/configure.ac +++ b/configure.ac @@ -3067,7 +3067,7 @@ if test "x$openssl" = "xyes" ; then ) # Check for various EVP support in OpenSSL - AC_CHECK_FUNCS([EVP_sha256 EVP_sha384 EVP_sha512 EVP_chacha20]) + AC_CHECK_FUNCS([EVP_sha256 EVP_sha384 EVP_sha512 EVP_chacha20 EVP_sm3]) # Check complete ECC support in OpenSSL AC_MSG_CHECKING([whether OpenSSL has NID_X9_62_prime256v1]) diff --git a/digest-libc.c b/digest-libc.c index 6e77a4492dd4..87aefe0066d8 100644...

...-git a/configure.ac b/configure.ac > index 016c96472d15..00bb4132adb7 100644 > --- a/configure.ac > +++ b/configure.ac > @@ -3067,7 +3067,7 @@ if test "x$openssl" = "xyes" ; then > ) > > # Check for various EVP support in OpenSSL > - AC_CHECK_FUNCS([EVP_sha256 EVP_sha384 EVP_sha512 EVP_chacha20]) > + AC_CHECK_FUNCS([EVP_sha256 EVP_sha384 EVP_sha512 EVP_chacha20 EVP_sm3]) > > # Check complete ECC support in OpenSSL > AC_MSG_CHECKING([whether OpenSSL has NID_X9_62_prime256v1]) > diff --git a/digest-libc.c b/digest-libc.c > index 6e7...

...EW Severity: minor Priority: P5 Component: Build system Assignee: unassigned-bugs at mindrot.org Reporter: kenny at the-b.org Some distributions (such as Android) do not compile with RIPEMD support, so it would be useful to check for EVP_RIPEMD like EVP_SHA256 is currently. -- You are receiving this mail because: You are watching the assignee of the bug.

I am assuming this is a user error (and the bug, if any is in configure not telling me how to activate it). I regularly see a message: Could not load host key: /etc/ssh/ssh_host_ecdsa_key And, obviously, I have never made the key before. I tried the following: ./ssh-keygen -t ecdsa -fssh_host_esdsa_key -N "" unknown key type ecdsa However, the syntax says it is a known type root at

....a27f9c3 100644 --- a/kex.c +++ b/kex.c @@ -80,6 +80,7 @@ static const struct kexalg kexalgs[] = { { KEX_ECDH_SHA2_NISTP384, KEX_ECDH_SHA2, NID_secp384r1, EVP_sha384 }, { KEX_ECDH_SHA2_NISTP521, KEX_ECDH_SHA2, NID_secp521r1, EVP_sha512 }, #endif + { KEX_CURVE25519_SHA256, KEX_C25519_SHA256, 0, EVP_sha256 }, { NULL, -1, -1, NULL}, }; diff --git a/kex.h b/kex.h index 9f1e1ad..df89ade 100644 --- a/kex.h +++ b/kex.h @@ -43,6 +43,7 @@ #define KEX_ECDH_SHA2_NISTP256 "ecdh-sha2-nistp256" #define KEX_ECDH_SHA2_NISTP384 "ecdh-sha2-nistp384" #define KEX_ECDH_SHA2_NISTP521 "ec...

...A_generate_parameters_ex... yes checking for BN_is_prime_ex... yes checking for RSA_get_default_method... yes checking whether OpenSSL has crippled AES support... no checking if EVP_DigestUpdate returns an int... yes checking for crypt in -lcrypt... no checking for SHA256_Update... yes checking for EVP_sha256... yes checking whether OpenSSL has complete ECC support... yes checking for ia_openinfo in -liaf... no checking whether OpenSSL's PRNG is internally seeded... configure: WARNING: cross compiling: assuming yes checking for ls... /bin/ls checking for netstat... /bin/netstat checking for arp... /...

If I am trying to build OpenSSH 6.6 with Kerberos GSSAPI support, do I still need to get Simon Wilkinson's patches? --- Scott Neugroschl | XYPRO Technology Corporation 4100 Guardian Street | Suite 100 |Simi Valley, CA 93063 | Phone 805 583-2874|Fax 805 583-0124 |