<p dir="ltr">Your query is being processed</p>
<div class="gmail_extra"><br><div class="gmail_quote">On 7 Nov 2016 5:34 p.m., <<a href="mailto:openssl-users-request@openssl.org">openssl-users-request@openssl.org</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Send openssl-users mailing list submissions to<br>
<a href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a><br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="https://mta.openssl.org/mailman/listinfo/openssl-users" rel="noreferrer" target="_blank">https://mta.openssl.org/<wbr>mailman/listinfo/openssl-users</a><br>
or, via email, send a message with subject or body 'help' to<br>
<a href="mailto:openssl-users-request@openssl.org">openssl-users-request@openssl.<wbr>org</a><br>
<br>
You can reach the person managing the list at<br>
<a href="mailto:openssl-users-owner@openssl.org">openssl-users-owner@openssl.<wbr>org</a><br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of openssl-users digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. Re: Problem in compiling OpenSSL on Windows-7-32-bit (Ajay Garg)<br>
2. How to sort cipher list by ephemeral/non-ephemeral?<br>
(Jeffrey Walton)<br>
3. Re: How to sort cipher list by ephemeral/non-ephemeral?<br>
(Salz, Rich)<br>
4. mailing list registration renewal - clarify bounce errors<br>
(debbie10t)<br>
5. Re: mailing list registration renewal - clarify bounce errors<br>
(Salz, Rich)<br>
<br>
<br>
------------------------------<wbr>------------------------------<wbr>----------<br>
<br>
Message: 1<br>
Date: Mon, 7 Nov 2016 21:52:57 +0530<br>
From: Ajay Garg <<a href="mailto:ajaygargnsit@gmail.com">ajaygargnsit@gmail.com</a>><br>
To: <a href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a><br>
Subject: Re: [openssl-users] Problem in compiling OpenSSL on<br>
Windows-7-32-bit<br>
Message-ID:<br>
<CAHP4M8UZ_uaeuGCmRnv0xG-K=<a href="mailto:L0gZoQy9vpC7xch5L8kmoOQ2Q@mail.gmail.com">L0g<wbr>ZoQy9vpC7xch5L8kmoOQ2Q@mail.<wbr>gmail.com</a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
Oops.. sorry.<br>
OpenSSL-version is 1.0.2d, and nasm-version is 2.12.02.<br>
<br>
<br>
<br>
On Mon, Nov 7, 2016 at 9:31 PM, Jeremy Farrell <<a href="mailto:jeremy.farrell@oracle.com">jeremy.farrell@oracle.com</a>><br>
wrote:<br>
<br>
> What version of OpenSSL? What version of nasm (nasm -v)? People are more<br>
> likely to be able to help if you provide such basic information.<br>
><br>
> Regards,<br>
> jjf<br>
><br>
> On 07/11/2016 11:42, Ajay Garg wrote:<br>
><br>
> Oops... pardon me.<br>
> The e) step was not done.<br>
><br>
> The errors came right after step d)<br>
><br>
> On 7 Nov 2016 3:36 p.m., "Ajay Garg" <<a href="mailto:ajaygargnsit@gmail.com">ajaygargnsit@gmail.com</a>> wrote:<br>
><br>
>> Hi All.<br>
>><br>
>> Following are the steps I followed :<br>
>><br>
>> ##############################<wbr>##############################<br>
>> ###################<br>
>> a)<br>
>> Downloaded nasm.exe from internet, and placed it in the include-path.<br>
>><br>
>> b)<br>
>> *perl Configure VC-WIN32*<br>
>><br>
>> c)<br>
>><br>
>><br>
>> *ms\do_nasm.bat *<br>
>> d)<br>
>><br>
>><br>
>> * nmake -f ms\nt.mak *<br>
>> e)<br>
>> *make*<br>
>><br>
>><br>
>><br>
>> *#############################<wbr>##############################<wbr>####################<br>
>> *<br>
>> Compilation runs fine for some time, but then I get hundreds of IDENTICAL<br>
>> errors as follows ::<br>
>><br>
>> ##############################<wbr>##############################<br>
>> ###################<br>
>><br>
>><br>
>><br>
>><br>
>><br>
>><br>
>><br>
>><br>
>><br>
>><br>
>><br>
>><br>
>><br>
>> *tmp32\sha1-586.asm:3964: warning: `PTR' is not a NASM keyword<br>
>> tmp32\sha1-586.asm:3964: error: comma, colon, decorator or end of line<br>
>> expecte after operand tmp32\sha1-586.asm:3970: error: symbol<br>
>> `__sha1_block_data_order_avx' redefined tmp32\sha1-586.asm:3970: error:<br>
>> parser: instruction expected tmp32\sha1-586.asm:3972: error: parser:<br>
>> instruction expected tmp32\sha1-586.asm:3983: error: parser: instruction<br>
>> expected tmp32\sha1-586.asm:3985: error: parser: instruction expected<br>
>> tmp32\sha1-586.asm:3986: error: parser: instruction expected<br>
>> tmp32\sha1-586.asm:3987: warning: label alone on a line without a colon<br>
>> might in error NMAKE : fatal error U1077: '"C:\Program Files\Microsoft<br>
>> Visual Studio 14.0\VC\ N\nasm.EXE"' : return code '0x1' Stop.*<br>
>><br>
>><br>
>> *#############################<wbr>##############################<wbr>####################<br>
>> *<br>
>> Any pointers how to solve this?<br>
>> I will heartfully grateful.<br>
>><br>
>> Thanks and Regards,<br>
>> Ajay<br>
>><br>
><br>
> --<br>
> J. J. Farrell<br>
> Not speaking for Oracle<br>
><br>
><br>
> --<br>
> openssl-users mailing list<br>
> To unsubscribe: <a href="https://mta.openssl.org/mailman/listinfo/openssl-users" rel="noreferrer" target="_blank">https://mta.openssl.org/<wbr>mailman/listinfo/openssl-users</a><br>
><br>
><br>
<br>
<br>
--<br>
Regards,<br>
Ajay<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="http://mta.openssl.org/pipermail/openssl-users/attachments/20161107/55d53de6/attachment-0001.html" rel="noreferrer" target="_blank">http://mta.openssl.org/<wbr>pipermail/openssl-users/<wbr>attachments/20161107/55d53de6/<wbr>attachment-0001.html</a>><br>
<br>
------------------------------<br>
<br>
Message: 2<br>
Date: Mon, 7 Nov 2016 12:11:56 -0500<br>
From: Jeffrey Walton <<a href="mailto:noloader@gmail.com">noloader@gmail.com</a>><br>
To: OpenSSL Users <<a href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a>><br>
Subject: [openssl-users] How to sort cipher list by<br>
ephemeral/non-ephemeral?<br>
Message-ID:<br>
<<a href="mailto:CAH8yC8nZ2gqqa5UZQo5aqYZRBzgyfNwZtJEMGZ95W2GgKtvwOQ@mail.gmail.com">CAH8yC8nZ2gqqa5UZQo5aqYZRBzgy<wbr>fNwZtJEMGZ95W2GgKtvwOQ@mail.<wbr>gmail.com</a>><br>
Content-Type: text/plain; charset=UTF-8<br>
<br>
I prefer to use a cipher list like "HIGH:!aNULL:!RC4:!MD5". I prefer<br>
it because its fairly easy to parse and understand. Its also easy to<br>
teach to developers.<br>
<br>
I want the resulting ciphers sorted with the ephemeral suites at the<br>
head of the list.<br>
<br>
How does one sort the list with ephemeral suites at the top of the list?<br>
<br>
-----<br>
<br>
If 'openssl ciphers' is stable with respect to its output, then the<br>
order is (is this @strength?):<br>
<br>
# openssl ciphers -v 'HIGH:!aNULL:!MD5:!RC4:!PSK:!<wbr>SRP:!KRB5' | cut -f 1 -d ' '<br>
ECDHE-RSA-AES256-GCM-SHA384<br>
ECDHE-ECDSA-AES256-GCM-SHA384<br>
ECDHE-RSA-AES256-SHA384<br>
ECDHE-ECDSA-AES256-SHA384<br>
ECDHE-RSA-AES256-SHA<br>
ECDHE-ECDSA-AES256-SHA<br>
DHE-DSS-AES256-GCM-SHA384<br>
DHE-RSA-AES256-GCM-SHA384<br>
DHE-RSA-AES256-SHA256<br>
DHE-DSS-AES256-SHA256<br>
DHE-RSA-AES256-SHA<br>
DHE-DSS-AES256-SHA<br>
DHE-RSA-CAMELLIA256-SHA<br>
DHE-DSS-CAMELLIA256-SHA<br>
ECDH-RSA-AES256-GCM-SHA384<br>
ECDH-ECDSA-AES256-GCM-SHA384<br>
ECDH-RSA-AES256-SHA384<br>
ECDH-ECDSA-AES256-SHA384<br>
ECDH-RSA-AES256-SHA<br>
ECDH-ECDSA-AES256-SHA<br>
AES256-GCM-SHA384<br>
AES256-SHA256<br>
AES256-SHA<br>
CAMELLIA256-SHA<br>
ECDHE-RSA-AES128-GCM-SHA256<br>
ECDHE-ECDSA-AES128-GCM-SHA256<br>
ECDHE-RSA-AES128-SHA256<br>
ECDHE-ECDSA-AES128-SHA256<br>
ECDHE-RSA-AES128-SHA<br>
ECDHE-ECDSA-AES128-SHA<br>
DHE-DSS-AES128-GCM-SHA256<br>
DHE-RSA-AES128-GCM-SHA256<br>
DHE-RSA-AES128-SHA256<br>
DHE-DSS-AES128-SHA256<br>
DHE-RSA-AES128-SHA<br>
DHE-DSS-AES128-SHA<br>
DHE-RSA-CAMELLIA128-SHA<br>
DHE-DSS-CAMELLIA128-SHA<br>
ECDH-RSA-AES128-GCM-SHA256<br>
ECDH-ECDSA-AES128-GCM-SHA256<br>
ECDH-RSA-AES128-SHA256<br>
ECDH-ECDSA-AES128-SHA256<br>
ECDH-RSA-AES128-SHA<br>
ECDH-ECDSA-AES128-SHA<br>
AES128-GCM-SHA256<br>
AES128-SHA256<br>
AES128-SHA<br>
CAMELLIA128-SHA<br>
ECDHE-RSA-DES-CBC3-SHA<br>
ECDHE-ECDSA-DES-CBC3-SHA<br>
EDH-RSA-DES-CBC3-SHA<br>
EDH-DSS-DES-CBC3-SHA<br>
ECDH-RSA-DES-CBC3-SHA<br>
ECDH-ECDSA-DES-CBC3-SHA<br>
DES-CBC3-SHA<br>
<br>
<br>
------------------------------<br>
<br>
Message: 3<br>
Date: Mon, 7 Nov 2016 17:29:49 +0000<br>
From: "Salz, Rich" <<a href="mailto:rsalz@akamai.com">rsalz@akamai.com</a>><br>
To: "<a href="mailto:noloader@gmail.com">noloader@gmail.com</a>" <<a href="mailto:noloader@gmail.com">noloader@gmail.com</a>>,<br>
"<a href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a>" <<a href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a>><br>
Subject: Re: [openssl-users] How to sort cipher list by<br>
ephemeral/non-ephemeral?<br>
Message-ID:<br>
<<a href="mailto:34a85f79d8ee40ccb89e270a1b6cd428@usma1ex-dag1mb1.msg.corp.akamai.com">34a85f79d8ee40ccb89e270a1b6cd<wbr>428@usma1ex-dag1mb1.msg.corp.<wbr>akamai.com</a>><br>
Content-Type: text/plain; charset="Windows-1252"<br>
<br>
You can't do it with keywords. Be explicit about what you want and put it in the order you want. That way you will not be surprised when the expansion of a keyword changes.<br>
<br>
>From your list, ECDHE first, then decide RSA/ECDSA. Then AES-GCM. Why do you care about sha384 vs 256? Do you really need camellia-only?<br>
<br>
And @STRENGTH is a hack, looking at only one factor.<br>
<br>
Here is a real-world example (this ignores some of my advice)<br>
ECDHE-RSA-AES256-GCM-SHA384:<wbr>ECDHE-ECDSA-AES256-GCM-SHA384:<br>
ECDHE-RSA-AES256-SHA384:ECDHE-<wbr>ECDSA-AES256-SHA384:AES256-<wbr>GCM-SHA384:<br>
AES256-SHA256:DES-CBC3-SHA:<wbr>ECDHE-RSA-AES128-GCM-SHA256:<br>
ECDHE-ECDSA-AES128-GCM-SHA256:<wbr>ECDHE-RSA-AES128-SHA256:<br>
ECDHE-ECDSA-AES128-SHA256:<wbr>AES128-GCM-SHA256:AES128-<wbr>SHA256:<br>
<br>
--<br>
Senior Architect, Akamai Technologies<br>
Member, OpenSSL Dev Team<br>
IM: <a href="mailto:richsalz@jabber.at">richsalz@jabber.at</a> Twitter: RichSalz<br>
<br>
<br>
------------------------------<br>
<br>
Message: 4<br>
Date: Mon, 7 Nov 2016 17:32:06 +0000<br>
From: debbie10t <<a href="mailto:debbie10t@gmail.com">debbie10t@gmail.com</a>><br>
To: <a href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a><br>
Subject: [openssl-users] mailing list registration renewal - clarify<br>
bounce errors<br>
Message-ID: <<a href="mailto:ee58a3b7-cb09-fb92-8774-99908d8ad028@gmail.com">ee58a3b7-cb09-fb92-8774-<wbr>99908d8ad028@gmail.com</a>><br>
Content-Type: text/plain; charset=utf-8; format=flowed<br>
<br>
Hi,<br>
<br>
today I received an email from <a href="mailto:openssl-users-request@openssl.org">openssl-users-request@openssl.<wbr>org</a><br>
<br>
<quote><br>
Your membership in the mailing list openssl-users has been disabled<br>
due to excessive bounces ..<br>
</quote><br>
<br>
I can find no evidence of "excessive bounces .." so I am just asking<br>
here, is this a standard clean up of the ML or have you really received<br>
excessive bounces from my email address ?<br>
<br>
Thank you.<br>
--<br>
<br>
<br>
------------------------------<br>
<br>
Message: 5<br>
Date: Mon, 7 Nov 2016 17:34:07 +0000<br>
From: "Salz, Rich" <<a href="mailto:rsalz@akamai.com">rsalz@akamai.com</a>><br>
To: "<a href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a>" <<a href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a>><br>
Subject: Re: [openssl-users] mailing list registration renewal -<br>
clarify bounce errors<br>
Message-ID:<br>
<<a href="mailto:2cf7b93033d64c05bc455d9249f36c2b@usma1ex-dag1mb1.msg.corp.akamai.com">2cf7b93033d64c05bc455d9249f36<wbr>c2b@usma1ex-dag1mb1.msg.corp.<wbr>akamai.com</a>><br>
Content-Type: text/plain; charset="Windows-1252"<br>
<br>
> I can find no evidence of "excessive bounces .." so I am just asking here, is<br>
> this a standard clean up of the ML or have you really received excessive<br>
> bounces from my email address ?<br>
<br>
The latter.<br>
<br>
We have seen some more reports of this recently, and are increasing the logging to determine the cause. Interestingly, it's all from <a href="http://gmail.com" rel="noreferrer" target="_blank">gmail.com</a> addresses.<br>
<br>
<br>
<br>
------------------------------<br>
<br>
Subject: Digest Footer<br>
<br>
______________________________<wbr>_________________<br>
openssl-users mailing list<br>
<a href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a><br>
<a href="https://mta.openssl.org/mailman/listinfo/openssl-users" rel="noreferrer" target="_blank">https://mta.openssl.org/<wbr>mailman/listinfo/openssl-users</a><br>
<br>
<br>
------------------------------<br>
<br>
End of openssl-users Digest, Vol 24, Issue 12<br>
******************************<wbr>***************<br>
</blockquote></div></div>