<div dir="ltr"><div class="gmail_default" style="font-family:simsun,serif;color:rgb(0,0,255)"><span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:14px">text / plain的;字符集=“utf-8” </span><br></div></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature" data-smartmail="gmail_signature">liuge<br><br><br></div></div>
<br><div class="gmail_quote">2016-12-13 2:45 GMT+08:00 <span dir="ltr"><<a href="mailto:openssl-users-request@openssl.org" target="_blank">openssl-users-request@openssl.org</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Send openssl-users mailing list submissions to<br>
<a href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a><br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="https://mta.openssl.org/mailman/listinfo/openssl-users" rel="noreferrer" target="_blank">https://mta.openssl.org/<wbr>mailman/listinfo/openssl-users</a><br>
or, via email, send a message with subject or body 'help' to<br>
<a href="mailto:openssl-users-request@openssl.org">openssl-users-request@openssl.<wbr>org</a><br>
<br>
You can reach the person managing the list at<br>
<a href="mailto:openssl-users-owner@openssl.org">openssl-users-owner@openssl.<wbr>org</a><br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of openssl-users digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. Re: Doubt about OpenSSL library initialization in an HTTP<br>
client application (silvioprog)<br>
2. Re: Doubt about OpenSSL library initialization in an HTTP<br>
client application (Salz, Rich)<br>
3. Re: Doubt about OpenSSL library initialization in an HTTP<br>
client application (silvioprog)<br>
4. Re: Doubt about OpenSSL library initialization in an HTTP<br>
client application (Salz, Rich)<br>
5. Re: Doubt about OpenSSL library initialization in an HTTP<br>
client application (silvioprog)<br>
6. Re: Doubt about OpenSSL library initialization in an HTTP<br>
client application (silvioprog)<br>
<br>
<br>
------------------------------<wbr>------------------------------<wbr>----------<br>
<br>
Message: 1<br>
Date: Mon, 12 Dec 2016 14:48:18 -0300<br>
From: silvioprog <<a href="mailto:silvioprog@gmail.com">silvioprog@gmail.com</a>><br>
To: <a href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a><br>
Subject: Re: [openssl-users] Doubt about OpenSSL library<br>
initialization in an HTTP client application<br>
Message-ID:<br>
<<a href="mailto:CAKq_V2%2BU4SyY6pAmoqwhfzuRn4T_2O3%2Bv11E93x65sZ_MbVzJA@mail.gmail.com">CAKq_V2+U4SyY6pAmoqwhfzuRn4T_<wbr>2O3+v11E93x65sZ_MbVzJA@mail.<wbr>gmail.com</a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
Oops,<br>
<br>
I meant:<br>
<br>
"In short, I just replaced the RAND_screen() call to the RAND_poll(),<br>
generated a random buffer using RAND_bytes() (based on<br>
<a href="https://wiki.openssl.org/index.php/Random_Numbers#Software" rel="noreferrer" target="_blank">https://wiki.openssl.org/<wbr>index.php/Random_Numbers#<wbr>Software</a>) seeding it via<br>
RAND_add()"<br>
<br>
On Mon, Dec 12, 2016 at 2:46 PM, silvioprog <<a href="mailto:silvioprog@gmail.com">silvioprog@gmail.com</a>> wrote:<br>
[...]<br>
<br>
> In short, I just removed the RAND_screen() call, generated a random buffer<br>
> using RAND_bytes() (based on <a href="https://wiki.openssl.org/" rel="noreferrer" target="_blank">https://wiki.openssl.org/</a><br>
> index.php/Random_Numbers#<wbr>Software) seeding via RAND_add().<br>
><br>
<br>
--<br>
Silvio Cl?cio<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="http://mta.openssl.org/pipermail/openssl-users/attachments/20161212/dd45a901/attachment-0001.html" rel="noreferrer" target="_blank">http://mta.openssl.org/<wbr>pipermail/openssl-users/<wbr>attachments/20161212/dd45a901/<wbr>attachment-0001.html</a>><br>
<br>
------------------------------<br>
<br>
Message: 2<br>
Date: Mon, 12 Dec 2016 18:04:17 +0000<br>
From: "Salz, Rich" <<a href="mailto:rsalz@akamai.com">rsalz@akamai.com</a>><br>
To: "<a href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a>" <<a href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a>><br>
Subject: Re: [openssl-users] Doubt about OpenSSL library<br>
initialization in an HTTP client application<br>
Message-ID:<br>
<<a href="mailto:d5e08b9fe75842f993a6888bc67de621@usma1ex-dag1mb1.msg.corp.akamai.com">d5e08b9fe75842f993a6888bc67de<wbr>621@usma1ex-dag1mb1.msg.corp.<wbr>akamai.com</a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
> "In short, I just replaced the RAND_screen() call to the RAND_poll(), generated a random buffer using RAND_bytes()?(based on?<a href="https://wiki.openssl.org/index.php/Random_Numbers#Software" rel="noreferrer" target="_blank">https://wiki.openssl.org/<wbr>index.php/Random_Numbers#<wbr>Software</a>) seeding it via RAND_add()"<br>
<br>
You fed RAND_bytes output back into RAND_add? That's silly.<br>
<br>
------------------------------<br>
<br>
Message: 3<br>
Date: Mon, 12 Dec 2016 15:24:23 -0300<br>
From: silvioprog <<a href="mailto:silvioprog@gmail.com">silvioprog@gmail.com</a>><br>
To: <a href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a><br>
Subject: Re: [openssl-users] Doubt about OpenSSL library<br>
initialization in an HTTP client application<br>
Message-ID:<br>
<CAKq_V2KEJktX==qTtfQ1QpCYdH3=<a href="mailto:HDQ-svFWxu6Be%2BoKUW_C_g@mail.gmail.com"><wbr>HDQ-svFWxu6Be+oKUW_C_g@mail.<wbr>gmail.com</a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
On Mon, Dec 12, 2016 at 3:04 PM, Salz, Rich <<a href="mailto:rsalz@akamai.com">rsalz@akamai.com</a>> wrote:<br>
<br>
> > "In short, I just replaced the RAND_screen() call to the RAND_poll(),<br>
> generated a random buffer using RAND_bytes() (based on<br>
> <a href="https://wiki.openssl.org/index.php/Random_Numbers#Software" rel="noreferrer" target="_blank">https://wiki.openssl.org/<wbr>index.php/Random_Numbers#<wbr>Software</a>) seeding it<br>
> via RAND_add()"<br>
><br>
> You fed RAND_bytes output back into RAND_add? That's silly.<br>
<br>
<br>
Yes. Is it unnecessary? My steps are:<br>
<br>
...<br>
- RAND_scree()<br>
+ RAND_poll()<br>
+ RAND_bytes(buf, 128);<br>
+ RAND_add(buf, length(buf), length(buf));<br>
...<br>
<br>
(I noticed I sent wrong patch, the correct one declare the RAND_bytes func<br>
^^' )<br>
<br>
--<br>
Silvio Cl?cio<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="http://mta.openssl.org/pipermail/openssl-users/attachments/20161212/2c812462/attachment-0001.html" rel="noreferrer" target="_blank">http://mta.openssl.org/<wbr>pipermail/openssl-users/<wbr>attachments/20161212/2c812462/<wbr>attachment-0001.html</a>><br>
<br>
------------------------------<br>
<br>
Message: 4<br>
Date: Mon, 12 Dec 2016 18:28:04 +0000<br>
From: "Salz, Rich" <<a href="mailto:rsalz@akamai.com">rsalz@akamai.com</a>><br>
To: "<a href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a>" <<a href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a>><br>
Subject: Re: [openssl-users] Doubt about OpenSSL library<br>
initialization in an HTTP client application<br>
Message-ID:<br>
<<a href="mailto:f18fd8acb47f4d8ab03387b51ebe9482@usma1ex-dag1mb1.msg.corp.akamai.com">f18fd8acb47f4d8ab03387b51ebe9<wbr>482@usma1ex-dag1mb1.msg.corp.<wbr>akamai.com</a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
> > You fed RAND_bytes output back into RAND_add?? That's silly.<br>
<br>
> Yes. Is it unnecessary? My steps are:<br>
<br>
It is a bad idea. It is pointless. Don't do it.<br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 5<br>
Date: Mon, 12 Dec 2016 15:33:34 -0300<br>
From: silvioprog <<a href="mailto:silvioprog@gmail.com">silvioprog@gmail.com</a>><br>
To: <a href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a><br>
Subject: Re: [openssl-users] Doubt about OpenSSL library<br>
initialization in an HTTP client application<br>
Message-ID:<br>
<CAKq_V2K_gMX=<a href="mailto:gHs9HZDq--bO7GD7z1X-nmUKXwkL6Ud5vVASCQ@mail.gmail.com">gHs9HZDq--<wbr>bO7GD7z1X-nmUKXwkL6Ud5vVASCQ@<wbr>mail.gmail.com</a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
On Mon, Dec 12, 2016 at 3:28 PM, Salz, Rich <<a href="mailto:rsalz@akamai.com">rsalz@akamai.com</a>> wrote:<br>
<br>
> > > You fed RAND_bytes output back into RAND_add? That's silly.<br>
> > Yes. Is it unnecessary? My steps are:<br>
><br>
> It is a bad idea. It is pointless. Don't do it.<br>
<br>
<br>
So what is the correct way, 1 or 2?<br>
<br>
1)<br>
<br>
RAND_poll()<br>
/* RAND_bytes is unnecessary */<br>
/* RAND_add is unnecessary */<br>
<br>
2)<br>
<br>
RAND_poll()<br>
RAND_bytes(buf, 128);<br>
/* RAND_add is unnecessary */<br>
<br>
:-S<br>
<br>
--<br>
Silvio Cl?cio<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="http://mta.openssl.org/pipermail/openssl-users/attachments/20161212/2a763b1a/attachment-0001.html" rel="noreferrer" target="_blank">http://mta.openssl.org/<wbr>pipermail/openssl-users/<wbr>attachments/20161212/2a763b1a/<wbr>attachment-0001.html</a>><br>
<br>
------------------------------<br>
<br>
Message: 6<br>
Date: Mon, 12 Dec 2016 15:44:19 -0300<br>
From: silvioprog <<a href="mailto:silvioprog@gmail.com">silvioprog@gmail.com</a>><br>
To: <a href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a><br>
Subject: Re: [openssl-users] Doubt about OpenSSL library<br>
initialization in an HTTP client application<br>
Message-ID:<br>
<<a href="mailto:CAKq_V2%2BwfnRfAx29i_6ESBj06Qh%2BUBkq4FZD6ZT7xcY-KFJ95w@mail.gmail.com">CAKq_V2+wfnRfAx29i_6ESBj06Qh+<wbr>UBkq4FZD6ZT7xcY-KFJ95w@mail.<wbr>gmail.com</a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
On Mon, Dec 12, 2016 at 3:33 PM, silvioprog <<a href="mailto:silvioprog@gmail.com">silvioprog@gmail.com</a>> wrote:<br>
[...]<br>
<br>
> So what is the correct way, 1 or 2?<br>
><br>
<br>
*"which is ..."<br>
<br>
--<br>
Silvio Cl?cio<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="http://mta.openssl.org/pipermail/openssl-users/attachments/20161212/a77612b1/attachment.html" rel="noreferrer" target="_blank">http://mta.openssl.org/<wbr>pipermail/openssl-users/<wbr>attachments/20161212/a77612b1/<wbr>attachment.html</a>><br>
<br>
------------------------------<br>
<br>
Subject: Digest Footer<br>
<br>
______________________________<wbr>_________________<br>
openssl-users mailing list<br>
<a href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a><br>
<a href="https://mta.openssl.org/mailman/listinfo/openssl-users" rel="noreferrer" target="_blank">https://mta.openssl.org/<wbr>mailman/listinfo/openssl-users</a><br>
<br>
<br>
------------------------------<br>
<br>
End of openssl-users Digest, Vol 25, Issue 8<br>
******************************<wbr>**************<br>
</blockquote></div><br></div>