Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Thu, 6 Jan 2011 21:08:18 -0500
From: "Robert Harris" <rs904c@...scape.net>
To: <john-users@...ts.openwall.com>
Subject: RE: hmailserver patch has errors, error when compiling in Linux x86 64-bit and 32-bit

Alexander,

Why is the jumbo patch so dependent on such an old version of openssl?   It
looks like OpenSSL 0.9.7 was first outdated in July 2005.

What is the process/level of effort to get JtR using the latest versions of
Openssl?

James/Alexander,

What do you want to do to resolve/How do you want to handle the current
"issue" with the hmailserver patch?

-Robert B. Harris from VA
Rs904c@...scape.net

-----Original Message-----
From: Solar Designer [mailto:solar@...nwall.com] 
Sent: Thursday, January 06, 2011 8:07 PM
To: john-users@...ts.openwall.com
Subject: Re: [john-users] hmailserver patch has errors, error when compiling
in Linux x86 64-bit and 32-bit

James, Robert -

First of all, thank you for your efforts on this!

On Thu, Jan 06, 2011 at 06:44:28PM -0500, Robert Harris wrote:
> hmailserver_fmt.c: undefined reference to `SHA256_Init'

My understanding is that SHA-256 is only available starting with
OpenSSL 0.9.8, whereas the jumbo patches require 0.9.7+ so far (not
necessarily 0.9.8+).  So if we merge the hmailserver support patch, we
make the jumbo patch require 0.9.8+, which is a bit of a problem
(although it's becoming more acceptable over time).  Maybe we should
include a SHA-256 implementation into the patch itself for now.

Another comment I had is that maybe we need "generic salted SHA-256"
support, similar to what I did for SHA-1 and MD4 recently, instead of
the specialized hmailserver support patch.

Thanks again,

Alexander

Powered by blists - more mailing lists

Your e-mail address:

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.