From nspring at cs.washington.edu Sat Oct 6 23:49:02 2001 From: nspring at cs.washington.edu (Neil Spring) Date: Sat Oct 6 23:49:02 2001 Subject: dmalloc / asn1 parser [patch] Message-ID: <20011001180558.A7930@cs.washington.edu> When I add the following patch, dmalloc no longer complains about trying to free a null pointer. This may be related to my certificate parsing woes. -neil diff -u x509_asn1.c.old x509_asn1.c --- x509_asn1.c.old Mon Oct 1 18:03:41 2001 +++ x509_asn1.c Mon Oct 1 18:04:32 2001 @@ -187,8 +187,10 @@ if(node==NULL) return; - gnutls_free(node->name); - gnutls_free(node->value); + if(node->name!=NULL) + gnutls_free(node->name); + if(node->value!=NULL) + gnutls_free(node->value); gnutls_free(node); } From nspring at cs.washington.edu Sat Oct 6 23:49:02 2001 From: nspring at cs.washington.edu (Neil Spring) Date: Sat Oct 6 23:49:02 2001 Subject: asn 1 parse error In-Reply-To: <20010930235511.A3513@cs.washington.edu> References: <20010930235511.A3513@cs.washington.edu> Message-ID: <20011003170130.A31538@cs.washington.edu> This icky parse error can be fixed by increasing the size of the extnValue buffer to 512. I didn't really play around with other values between 128 and 512, and it might be the case that an even larger buffer is necessary. line 210 of x509_extensions.c. If you can make this change before 0.2.4, I'd appreciate it. I believe the extension that causes this overflow is the following (from 'openssl x509 -in server.pem -text') : X509v3 Authority Key Identifier: keyid:D6:5D:C0:40:A6:D1:BA:35:D3:C4:4A:A0:26:B3:05:43:3C:FA:69:D5 DirName:/C=US/ST=Washington/L=Seattle/O=Univ Washington/CN=poplar.cs.washington.edu/Email=nspring at cs.washington.edu serial:00 thanks, -neil On Sun, Sep 30, 2001 at 11:55:12PM -0700, Neil Spring wrote: > Hi. > > I'm working on adding TLS support to wmbiff's IMAP client. > > I've got a successful client talking to my school's IMAP > server, but it fails when handshaking with my home IMAP > server. My imap server is either uw-imapd-ssl using the > STARTTLS command or the same server behind sslwrap (both > from Debian, both of which use openssl). > > I uncommented HANDSHAKE_DEBUG and DEBUG, and added > an extra gnutls_log call where asn1_read_value fails and > see the following output using 0.2.3. Lines that begin > 'zarathustra' were generated by my program. > > zarathustra.saavie.org:143: got: a001 OK STARTTLS completed > GNUTLS_ASSERT: gnutls_cert.c:231 > Handshake: CLIENT HELLO was send [50 bytes] > Handshake: SERVER HELLO was received [74 bytes] > Server's version: 3.1 > SessionID length: 32 > SessionID: 2dae0afeb07d804384d399b639836265328d8e962e805075580843e9bc9b8685 > Selected cipher suite: RSA_3DES_EDE_CBC_SHA > Handshake: CERTIFICATE was received [791 bytes] > GNUTLS_ASSERT: x509_extensions.c:266 > asn1_read_value parsing certificate2.tbsCertificate.extensions.?2.extnValue returned 12 > GNUTLS_ASSERT: gnutls_cert.c:865 > GNUTLS_ASSERT: auth_rsa.c:511 > GNUTLS_ASSERT: gnutls_kx.c:558 > GNUTLS_ASSERT: gnutls_handshake.c:1311 > GNUTLS Error: recv server certificate (-42) > zarathustra.saavie.org:143: Handshake failed > GNUTLS ERROR: ASN1_PARSING_ERROR > Failed to initialize TLS > > The ASN1 parsing error #12 is apparently ASN_MEM_ERROR. > > I assume, without much basis, that this is either an > interoperability problem with openssl or a dislike of > openssl generated certificates. If you need any details > or have suggestions, please let me know. It would be > great to know I'm invoking the gnutls library correctly. > > I don't know if it's possible to gracefully recover from > failure to parse the certificate and keep the encrypted > association, but that might be handy. > > If this belongs instead on gnutls-dev or -help, feel free > to forward. > > -neil From nspring at saavie.org Sun Oct 7 02:18:01 2001 From: nspring at saavie.org (Neil Spring) Date: Sun Oct 7 02:18:01 2001 Subject: bug report / asn1 parse error In-Reply-To: <20011006171509.A2535@cs.washington.edu> References: <20010930235511.A3513@cs.washington.edu> <20011003170130.A31538@cs.washington.edu> <20011006171509.A2535@cs.washington.edu> Message-ID: <20011006171604.B2535@cs.washington.edu> Hi; I sent the messages below to bug-gnutls at gnu.org as recommended on the gnutls web page, but had them rejected from being forwarded to gnutls-dev at gnupg.org because it is automatically bcc'd (or some such lackluster sendmail magic). In order for a gnutls-linked program to interoperate with a server using an openssl generated certificate (eg. those ssl daemons currently in Debian) the asn1 parser has to be modified to use a larger buffer when processing extensions. More robust solutions than simply increasing the size of the stack-allocated buffer would be to ignore extensions that are too long, or allocate space to store them dynamically. I'd appreciate it if such a change can be made before the next release. thanks, -neil On Wed, Oct 03, 2001 at 05:01:32PM -0700, Neil Spring wrote: > This icky parse error can be fixed by increasing the size > of the extnValue buffer to 512. I didn't really play around > with other values between 128 and 512, and it might be > the case that an even larger buffer is necessary. > > line 210 of x509_extensions.c. If you can make this > change before 0.2.4, I'd appreciate it. > > I believe the extension that causes this overflow is the > following (from 'openssl x509 -in server.pem -text') : > > X509v3 Authority Key Identifier: > keyid:D6:5D:C0:40:A6:D1:BA:35:D3:C4:4A:A0:26:B3:05:43:3C:FA:69:D5 > DirName:/C=US/ST=Washington/L=Seattle/O=Univ Washington/CN=poplar.cs.washington.edu/Email=nspring at cs.washington.edu > serial:00 > > thanks, > -neil > > On Sun, Sep 30, 2001 at 11:55:12PM -0700, Neil Spring wrote: > > Hi. > > > > I'm working on adding TLS support to wmbiff's IMAP client. > > > > I've got a successful client talking to my school's IMAP > > server, but it fails when handshaking with my home IMAP > > server. My imap server is either uw-imapd-ssl using the > > STARTTLS command or the same server behind sslwrap (both > > from Debian, both of which use openssl). > > > > I uncommented HANDSHAKE_DEBUG and DEBUG, and added > > an extra gnutls_log call where asn1_read_value fails and > > see the following output using 0.2.3. Lines that begin > > 'zarathustra' were generated by my program. > > > > zarathustra.saavie.org:143: got: a001 OK STARTTLS completed > > GNUTLS_ASSERT: gnutls_cert.c:231 > > Handshake: CLIENT HELLO was send [50 bytes] > > Handshake: SERVER HELLO was received [74 bytes] > > Server's version: 3.1 > > SessionID length: 32 > > SessionID: 2dae0afeb07d804384d399b639836265328d8e962e805075580843e9bc9b8685 > > Selected cipher suite: RSA_3DES_EDE_CBC_SHA > > Handshake: CERTIFICATE was received [791 bytes] > > GNUTLS_ASSERT: x509_extensions.c:266 > > asn1_read_value parsing certificate2.tbsCertificate.extensions.?2.extnValue returned 12 > > GNUTLS_ASSERT: gnutls_cert.c:865 > > GNUTLS_ASSERT: auth_rsa.c:511 > > GNUTLS_ASSERT: gnutls_kx.c:558 > > GNUTLS_ASSERT: gnutls_handshake.c:1311 > > GNUTLS Error: recv server certificate (-42) > > zarathustra.saavie.org:143: Handshake failed > > GNUTLS ERROR: ASN1_PARSING_ERROR > > Failed to initialize TLS > > > > The ASN1 parsing error #12 is apparently ASN_MEM_ERROR. > > > > I assume, without much basis, that this is either an > > interoperability problem with openssl or a dislike of > > openssl generated certificates. If you need any details > > or have suggestions, please let me know. It would be > > great to know I'm invoking the gnutls library correctly. > > > > I don't know if it's possible to gracefully recover from > > failure to parse the certificate and keep the encrypted > > association, but that might be handy. > > > > If this belongs instead on gnutls-dev or -help, feel free > > to forward. > > > > -neil From nmav at hellug.gr Sun Oct 7 14:47:02 2001 From: nmav at hellug.gr (Nikos Mavroyanopoulos) Date: Sun Oct 7 14:47:02 2001 Subject: bug report / asn1 parse error In-Reply-To: <20011006171604.B2535@cs.washington.edu> References: <20010930235511.A3513@cs.washington.edu> <20011003170130.A31538@cs.washington.edu> <20011006171509.A2535@cs.washington.edu> <20011006171604.B2535@cs.washington.edu> Message-ID: <20011007153933.4384c502.nmav@hellug.gr> On Sat, 6 Oct 2001 17:16:07 -0700 Neil Spring wrote: > Hi; > I sent the messages below to bug-gnutls at gnu.org as > recommended on the gnutls web page, but had them rejected > from being forwarded to gnutls-dev at gnupg.org because it > is automatically bcc'd (or some such lackluster sendmail > magic). I'll look at it. > In order for a gnutls-linked program to interoperate with a > server using an openssl generated certificate (eg. those > ssl daemons currently in Debian) the asn1 parser has to be > modified to use a larger buffer when processing extensions. > More robust solutions than simply increasing the size of > the stack-allocated buffer would be to ignore extensions > that are too long, or allocate space to store them > dynamically. I've modified the extension parsing function to ignore (non-critical), extensions that are too long. Currently this is enough since the extensions we support should not be that long. > I'd appreciate it if such a change can be made before > the next release. I've done the change, and it is on the cvs. Thank you for debugging and reporting this. The next version will be available when I add the DHE_RSA ciphersuite (that will be soon). > thanks, > -neil -- Nikos Mavroyanopoulos mailto:nmav at hellug.gr From nmav at hellug.gr Wed Oct 10 11:35:02 2001 From: nmav at hellug.gr (Nikos Mavroyanopoulos) Date: Wed Oct 10 11:35:02 2001 Subject: [gnutls-dev]dhe_rsa Message-ID: <20011010122931.279792f9.nmav@hellug.gr> I've added support for the DHE_RSA ciphersuites to gnutls (it's in the cvs). This means that sign only certificates may also be used. I will now add an option to replace the default primes and generators and make a release in a few days. You may test the DHE_RSA ciphersuites by getting the source files from the cvs. -- Nikos Mavroyanopoulos mailto:nmav at hellug.gr From wk at gnupg.org Thu Oct 11 08:57:01 2001 From: wk at gnupg.org (Werner Koch) Date: Thu Oct 11 08:57:01 2001 Subject: [gnutls-dev] dhe_rsa In-Reply-To: <20011011001023.0b421dbe.nmav@hellug.gr> (Nikos Mavroyanopoulos's message of "Thu, 11 Oct 2001 00:10:23 +0300") References: <20011010122931.279792f9.nmav@hellug.gr> <87bsjfh6x0.fsf@alberti.gnupg.de> <20011010185211.4a8cdc6c.nmav@hellug.gr> <878zejflna.fsf@alberti.gnupg.de> <20011011001023.0b421dbe.nmav@hellug.gr> Message-ID: <878zeik6m6.fsf@alberti.gnupg.de> On Thu, 11 Oct 2001 00:10:23 +0300, Nikos Mavroyanopoulos said: > Some of the things handler by aegypten are in my todo list for gnutls. Will > this be a generic purpose x509 library that could be used in gnutls? Should I Yes, in the first pahse it will use a special x.509 profile but I plan to make this configurable. > focus on something different until this is ready? Well, you might want to wait. The schedule is that we have working encryption etc by end of Novemeber. The library should then be usable. Werner -- Werner Koch Omnis enim res, quae dando non deficit, dum habetur g10 Code GmbH et non datur, nondum habetur, quomodo habenda est. Privacy Solutions -- Augustinus From nmav at hellug.gr Fri Oct 12 10:26:02 2001 From: nmav at hellug.gr (Nikos Mavroyanopoulos) Date: Fri Oct 12 10:26:02 2001 Subject: [gnutls-dev] gnutls 0.2.4 Message-ID: <20011012111845.6b5aa5c6.nmav@hellug.gr> I've just released gnutls 0.2.4. It is not very much tested, and there are known bugs in the der certificate parsing. However the news are: Better handling of X.509 certificate extensions Added DHE_RSA ciphersuites Updated the Name Indication (dnsname) extension Improvements in Diffie Hellman primes handling The todo list has also changed due to aegypten. Thus gnutls in the next version will not depend only on it's own x.509 handling functions. -- Nikos Mavroyanopoulos mailto:nmav at hellug.gr From nmav at hellug.gr Mon Oct 22 22:17:02 2001 From: nmav at hellug.gr (Nikos Mavroyanopoulos) Date: Mon Oct 22 22:17:02 2001 Subject: [gnutls-dev] cvs commits Message-ID: <20011022231219.3c87b590.nmav@hellug.gr> There is a new mailing list for cvs commits. Please visit http://lists.gnupg.org/mailman/listinfo/gnutls-commits for more information. -- Nikos Mavroyanopoulos mailto:nmav at hellug.gr From softwarenieuws at teledirekt.nl Thu Oct 25 12:55:01 2001 From: softwarenieuws at teledirekt.nl (Teledirekt Nederland) Date: Thu Oct 25 12:55:01 2001 Subject: [gnutls-dev] Windows XP: al vanaf fl. 285,- Message-ID: <26362200110425105559350@teledirekt.nl> Geachte heer/mevrouw Nog 1 dag en dan is het zover: de releasedatum van WINDOWS XP !! Windows XP, het allernieuwste besturingssysteem van Microsoft, kunt u nu bij ons bestellen !! U bestelt via deze e-mail Windows XP? Profiteer dan tevens van een fikse korting op KILOMETERDECLARATIE 2001 ! U kunt Kilometerdeclaratie 2001 aanschaffen van: fl. 99,- (44,92 Euro) voor: fl. 69,- (31,31 Euro) Onderaan deze e-mailing vindt u onze speciale aanbiedingen met kortingen die oplopen tot bijna 40%. Voor een totaaloverzicht van ons assortiment: www.teledirekt.nl Wilt u extra productinformatie of een goed advies? Bel GRATIS de Teledirekt Verkoopadvieslijn: 0800-237 66 44 Als u direct wilt bestellen: http://63.105.9.58/em/em47pt.htm ============================================================== # WINDOWS XP BRENGT UW PC NAAR ONGEKENDE HOOGTE - DE NIEUWE STANDAARD VOOR EFFICI?NT EN BETROUWBAAR COMPUTERGEBRUIK - Windows XP heeft een totaal nieuwe look en is ook inhoudelijk aanzienlijk veranderd. Het besturingssysteem haakt direct in op de vooruitgang van internet en de digitale media. Microsoft introduceert een aantal edities van Windows XP die zijn afgestemd op uw computerbehoeften zowel thuis als op kantoor. * WINDOWS XP HOME EDITION * De Windows XP Home Edition is het nieuwe besturingssysteem voor de PC thuis en biedt u alles wat u nodig hebt om eenvoudig computers en een thuisnetwerk te delen. Met de digitale fotofuncties kunt u foto's ophalen, organiseren en delen met de alles-in-??n muziekfunctie kunt u kwalitatief hoogstaande muziek ontdekken, downloaden, opslaan en afspelen. - ??n plaats voor het afspelen van DVD's, ordenen van muziek, branden van CD's, etc. - Films opnemen, bewerken, ordenen en delen op uw computer. - Afbeeldingen ordenen en bekijken of afdrukken van uw foto's bestellen via een webservice. - Eenvoudiger dan ooit om uw eigen thuisnetwerk te installeren. Prijs: fl. 615,- (279,07 Euro) Win 98/2000/ME Art.nr: 303070 Bestellen: http://63.105.9.58/em/em47pt.htm * WINDOWS XP HOME EDITION UPGRADE Prijs: fl. 285,- (129,33 Euro) Win 98/2000/ME Art.nr: 303071 Bestellen: http://63.105.9.58/em/em47pt.htm * WINDOWS XP PROFESSIONAL EDITION Biedt alle voordelen van Windows XP plus o.a. een hogere veiligheid en eersteklas mobiele ondersteuning om off-line te kunnen werken of om op afstand toegang te krijgen tot uw computer. Prijs: fl. 924,- (419,29 Euro) Win 98/2000/ME Art.nr: 303068 Bestellen: http://63.105.9.58/em/em47pt.htm * WINDOWS XP PROFESSIONAL EDITION UPGRADE Prijs: fl. 571,- (259,11 Euro) Win 98/2000/ME Art.nr: 303069 Bestellen: http://63.105.9.58/em/em47pt.htm U bestelt Windows XP via deze e-mailing?? Dan kunt u Kilometerdeclaratie 2001 aanschaffen van: fl. 99,- (44,92 Euro) voor: fl. 69,- (31,31 Euro) Dit kunt u aangeven op het bestelformulier: http://63.105.9.58/em/em47pt.htm ============================================================== # CD'S WISSELEN IS NIET MEER NODIG Kopieer uw favoriete CD-Rom's naar uw harde schijf. CD's tot 20 x sneller toegankelijk. Prijs: fl. 129,- (58,54 Euro) Win 95/98/NT/2000 Art.nr: 303042 Bestellen: http://63.105.9.58/em/em47pt.htm ============================================================== # CD-FOONGIDS 2001 + ADRESBESTAND COMPACT Meer dan 7.000.000 adressen met telefoon-, fax- en mobiele nummers. Prijs: fl. 69,- (31,31 Euro) Win 95/98/NT/2000/ME Art.nr: 302779 Bestellen: http://63.105.9.58/em/em47pt.htm ============================================================== # CURSUS INTERNET, WINDOWS 98, WORD, EXCEL EN POWERPOINT Bundelprijs: fl. 79,- (35,85 Euro) Win 95/98 Art.nr: 302918 Bestellen: http://63.105.9.58/em/em47pt.htm ============================================================== # ONTWERP ZELF UW EIGEN INTERNETSITE Prijs: fl. 85,- (38,57 Euro) Win 95/98/NT/2000/ME Art.nr: 303034 Bestellen: http://63.105.9.58/em/em47pt.htm ============================================================== ** Teledirekt aanraders ** 1. Nedsoft EuroOffice pro, fl. 149,- (67,61 Euro) Microsoft Office-documenten omzetten in de Euro (art.nr: 303009) 2. CardIris, fl. 699,- (317,19 Euro) Met ??n klik al uw visitekaartjes in uw PC (art.nr: 302759) 3. Easy Travel Plus, fl. 79,- (35,85 Euro) Alle straten van de Benelux op ??n CD-Rom (art.nr: 301590) 4. 333.000 Professionele afbeeldingen, fl. 169,- (76,69 Euro) Cliparts, bitmapafbeeldingen, internetanimaties, foto's, afbeeldingen (art.nr: 301025) 5. NL-Sat, fl. 42,50 (19,29 Euro) Satellietatlas van Nederland (art.nr: 301445) Bestellen: http://63.105.9.58/em/em47pt.htm ============================================================== ** Aanbiedingen OP = OP ** # VISUAL VOORRAAD, voor een eenvoudig en overzichtelijk voorraadbeheer. Dit pakket biedt u onder andere het volgende: - Voorraden beheren. - Klant-/leveranciersafspraken bijhouden. - Automatisch bestellingen genereren. - Deelleveringen bij goederen ontvangen. - Historie van bestel- en verkoopgegevens vastleggen en opvragen. - Beheer van meerdere magazijnen (van eenvoudig tot zeer geavanceerd). - Uitgebreide opvraag van omzetgegevens per periode, artikel/artikelgroep of klant. - Ondersteuning vreemde valuta en talen. van: fl. 995,- voor: fl. 695,- (30% korting) van: 451,51 Euro voor: 315,38 Euro Art.nr: 301038 Bestellen: http://63.105.9.58/em/em47pt.htm ============================================================== # RECRUITMENT ASSISTENT, sollicitaties snel en effici?nt afhandelen. Recruitment Assistent helpt u bij het vinden van de beste kandidaat voor een vacature. Het systeem bespaart u tijd bij het maken van brieven, houdt de administratie van uw correspondentie bij en assisteert u bij de verwerking van de gegevens. Zodat u zich kunt concentreren op de mensen zelf.... van: fl. 799,- voor: fl. 499,- (38% korting) van: 362,57 Euro voor: 226,44 Euro Art.nr: 301308 Bestellen: http://63.105.9.58/em/em47pt.htm ============================================================== Als u gebruik wilt maken van deze aanbiedingen, dan kunt u bestellen via internet: http://63.105.9.58/em/em47pt.htm U hebt de producten (indien op voorraad) binnen 2 dagen op uw bureau. Met vriendelijke groet, Teledirekt Nederland De genoemde prijzen zijn exclusief BTW. Administratiekosten: fl. 15,- (6,81 Euro). ************************************************************** Wanneer u SoftwareNieuws niet meer wilt ontvangen, kunt u: 1. dit aangeven op http://www.teledirektnederland.nl/maillijst2.htm; 2. ons telefonisch op de hoogte stellen dat u van de maillijst verwijderd wilt worden; 3. een e-mailtje sturen naar softwarenieuws at teledirekt.nl U kunt zich ook algemeen afmelden voor commerci?le e-mail berichten via www.e-mps.org/nl Deze e-mailing is verzonden geheel volgens de gedragscode van de DMSA. ************************************************************** Teledirekt Nederland B.V. Kelvinring 58 2952 BG Alblasserdam GRATIS Verkoopadvieslijn: 0800 - 237 66 44 Helpdesk (1 gpm): 0900 - 237 66 48 Fax: 078 - 691 98 29 E-mail adressen: Klantenservice: mailto:klantenservice at teledirekt.nl Helpdesk: mailto:helpdesk at teledirekt.nl Bestelcode: EM47p From softwarenieuws at teledirekt.nl Thu Oct 25 13:11:01 2001 From: softwarenieuws at teledirekt.nl (Teledirekt Nederland) Date: Thu Oct 25 13:11:01 2001 Subject: [gnutls-dev] Windows XP: al vanaf fl. 285,- Message-ID: <25013200110425111110290@teledirekt.nl> Geachte heer/mevrouw Nog 1 dag en dan is het zover: de releasedatum van WINDOWS XP !! Windows XP, het allernieuwste besturingssysteem van Microsoft, kunt u nu bij ons bestellen !! U bestelt via deze e-mail Windows XP? Profiteer dan tevens van een fikse korting op KILOMETERDECLARATIE 2001 ! U kunt Kilometerdeclaratie 2001 aanschaffen van: fl. 99,- (44,92 Euro) voor: fl. 69,- (31,31 Euro) Onderaan deze e-mailing vindt u onze speciale aanbiedingen met kortingen die oplopen tot bijna 40%. Voor een totaaloverzicht van ons assortiment: www.teledirekt.nl Wilt u extra productinformatie of een goed advies? Bel GRATIS de Teledirekt Verkoopadvieslijn: 0800-237 66 44 Als u direct wilt bestellen: http://63.105.9.58/em/em47pt.htm ============================================================== # WINDOWS XP BRENGT UW PC NAAR ONGEKENDE HOOGTE - DE NIEUWE STANDAARD VOOR EFFICI?NT EN BETROUWBAAR COMPUTERGEBRUIK - Windows XP heeft een totaal nieuwe look en is ook inhoudelijk aanzienlijk veranderd. Het besturingssysteem haakt direct in op de vooruitgang van internet en de digitale media. Microsoft introduceert een aantal edities van Windows XP die zijn afgestemd op uw computerbehoeften zowel thuis als op kantoor. * WINDOWS XP HOME EDITION * De Windows XP Home Edition is het nieuwe besturingssysteem voor de PC thuis en biedt u alles wat u nodig hebt om eenvoudig computers en een thuisnetwerk te delen. Met de digitale fotofuncties kunt u foto's ophalen, organiseren en delen met de alles-in-??n muziekfunctie kunt u kwalitatief hoogstaande muziek ontdekken, downloaden, opslaan en afspelen. - ??n plaats voor het afspelen van DVD's, ordenen van muziek, branden van CD's, etc. - Films opnemen, bewerken, ordenen en delen op uw computer. - Afbeeldingen ordenen en bekijken of afdrukken van uw foto's bestellen via een webservice. - Eenvoudiger dan ooit om uw eigen thuisnetwerk te installeren. Prijs: fl. 615,- (279,07 Euro) Win 98/2000/ME Art.nr: 303070 Bestellen: http://63.105.9.58/em/em47pt.htm * WINDOWS XP HOME EDITION UPGRADE Prijs: fl. 285,- (129,33 Euro) Win 98/2000/ME Art.nr: 303071 Bestellen: http://63.105.9.58/em/em47pt.htm * WINDOWS XP PROFESSIONAL EDITION Biedt alle voordelen van Windows XP plus o.a. een hogere veiligheid en eersteklas mobiele ondersteuning om off-line te kunnen werken of om op afstand toegang te krijgen tot uw computer. Prijs: fl. 924,- (419,29 Euro) Win 98/2000/ME Art.nr: 303068 Bestellen: http://63.105.9.58/em/em47pt.htm * WINDOWS XP PROFESSIONAL EDITION UPGRADE Prijs: fl. 571,- (259,11 Euro) Win 98/2000/ME Art.nr: 303069 Bestellen: http://63.105.9.58/em/em47pt.htm U bestelt Windows XP via deze e-mailing?? Dan kunt u Kilometerdeclaratie 2001 aanschaffen van: fl. 99,- (44,92 Euro) voor: fl. 69,- (31,31 Euro) Dit kunt u aangeven op het bestelformulier: http://63.105.9.58/em/em47pt.htm ============================================================== # CD'S WISSELEN IS NIET MEER NODIG Kopieer uw favoriete CD-Rom's naar uw harde schijf. CD's tot 20 x sneller toegankelijk. Prijs: fl. 129,- (58,54 Euro) Win 95/98/NT/2000 Art.nr: 303042 Bestellen: http://63.105.9.58/em/em47pt.htm ============================================================== # CD-FOONGIDS 2001 + ADRESBESTAND COMPACT Meer dan 7.000.000 adressen met telefoon-, fax- en mobiele nummers. Prijs: fl. 69,- (31,31 Euro) Win 95/98/NT/2000/ME Art.nr: 302779 Bestellen: http://63.105.9.58/em/em47pt.htm ============================================================== # CURSUS INTERNET, WINDOWS 98, WORD, EXCEL EN POWERPOINT Bundelprijs: fl. 79,- (35,85 Euro) Win 95/98 Art.nr: 302918 Bestellen: http://63.105.9.58/em/em47pt.htm ============================================================== # ONTWERP ZELF UW EIGEN INTERNETSITE Prijs: fl. 85,- (38,57 Euro) Win 95/98/NT/2000/ME Art.nr: 303034 Bestellen: http://63.105.9.58/em/em47pt.htm ============================================================== ** Teledirekt aanraders ** 1. Nedsoft EuroOffice pro, fl. 149,- (67,61 Euro) Microsoft Office-documenten omzetten in de Euro (art.nr: 303009) 2. CardIris, fl. 699,- (317,19 Euro) Met ??n klik al uw visitekaartjes in uw PC (art.nr: 302759) 3. Easy Travel Plus, fl. 79,- (35,85 Euro) Alle straten van de Benelux op ??n CD-Rom (art.nr: 301590) 4. 333.000 Professionele afbeeldingen, fl. 169,- (76,69 Euro) Cliparts, bitmapafbeeldingen, internetanimaties, foto's, afbeeldingen (art.nr: 301025) 5. NL-Sat, fl. 42,50 (19,29 Euro) Satellietatlas van Nederland (art.nr: 301445) Bestellen: http://63.105.9.58/em/em47pt.htm ============================================================== ** Aanbiedingen OP = OP ** # VISUAL VOORRAAD, voor een eenvoudig en overzichtelijk voorraadbeheer. Dit pakket biedt u onder andere het volgende: - Voorraden beheren. - Klant-/leveranciersafspraken bijhouden. - Automatisch bestellingen genereren. - Deelleveringen bij goederen ontvangen. - Historie van bestel- en verkoopgegevens vastleggen en opvragen. - Beheer van meerdere magazijnen (van eenvoudig tot zeer geavanceerd). - Uitgebreide opvraag van omzetgegevens per periode, artikel/artikelgroep of klant. - Ondersteuning vreemde valuta en talen. van: fl. 995,- voor: fl. 695,- (30% korting) van: 451,51 Euro voor: 315,38 Euro Art.nr: 301038 Bestellen: http://63.105.9.58/em/em47pt.htm ============================================================== # RECRUITMENT ASSISTENT, sollicitaties snel en effici?nt afhandelen. Recruitment Assistent helpt u bij het vinden van de beste kandidaat voor een vacature. Het systeem bespaart u tijd bij het maken van brieven, houdt de administratie van uw correspondentie bij en assisteert u bij de verwerking van de gegevens. Zodat u zich kunt concentreren op de mensen zelf.... van: fl. 799,- voor: fl. 499,- (38% korting) van: 362,57 Euro voor: 226,44 Euro Art.nr: 301308 Bestellen: http://63.105.9.58/em/em47pt.htm ============================================================== Als u gebruik wilt maken van deze aanbiedingen, dan kunt u bestellen via internet: http://63.105.9.58/em/em47pt.htm U hebt de producten (indien op voorraad) binnen 2 dagen op uw bureau. Met vriendelijke groet, Teledirekt Nederland De genoemde prijzen zijn exclusief BTW. Administratiekosten: fl. 15,- (6,81 Euro). ************************************************************** Wanneer u SoftwareNieuws niet meer wilt ontvangen, kunt u: 1. dit aangeven op http://www.teledirektnederland.nl/maillijst2.htm; 2. ons telefonisch op de hoogte stellen dat u van de maillijst verwijderd wilt worden; 3. een e-mailtje sturen naar softwarenieuws at teledirekt.nl U kunt zich ook algemeen afmelden voor commerci?le e-mail berichten via www.e-mps.org/nl Deze e-mailing is verzonden geheel volgens de gedragscode van de DMSA. ************************************************************** Teledirekt Nederland B.V. Kelvinring 58 2952 BG Alblasserdam GRATIS Verkoopadvieslijn: 0800 - 237 66 44 Helpdesk (1 gpm): 0900 - 237 66 48 Fax: 078 - 691 98 29 E-mail adressen: Klantenservice: mailto:klantenservice at teledirekt.nl Helpdesk: mailto:helpdesk at teledirekt.nl Bestelcode: EM47p From nmav at hellug.gr Sat Oct 27 11:01:01 2001 From: nmav at hellug.gr (Nikos Mavroyanopoulos) Date: Sat Oct 27 11:01:01 2001 Subject: [gnutls-dev] gnutls 0.2.9 Message-ID: <20011027115608.2725c782.nmav@hellug.gr> I've just released gnutls 0.2.9. It's just a step before 0.3.0 (I haven't done some of the changes I was planning). The NEWS are: - AUTH_INFO types and structures were moved to library internals - AUTH_FAILED is no longer returned in SRP authentication (any fatal error in SRP means auth failed) - Introduced GNUTLS_E_INTERRUPTED - Added support for non blocking IO - gnutls_recv() and gnutls_send() are now obsolete - Changed semantics of gnutls_rehandshake() -- Nikos Mavroyanopoulos mailto:nmav at hellug.gr From nmav at hellug.gr Tue Oct 30 13:37:01 2001 From: nmav at hellug.gr (Nikos Mavroyanopoulos) Date: Tue Oct 30 13:37:01 2001 Subject: [gnutls-dev] gnutls 0.2.9.1 Message-ID: <20011030143139.613db4ad.nmav@hellug.gr> I've released gnutls 0.2.9.1 which only corrects a bug in session resuming of 0.2.9. -- Nikos Mavroyanopoulos mailto:nmav at hellug.gr From jnelson at securepipe.com Tue Oct 30 15:55:02 2001 From: jnelson at securepipe.com (Jon Nelson) Date: Tue Oct 30 15:55:02 2001 Subject: [gnutls-dev] gnutls 0.2.9.1 In-Reply-To: <20011030143139.613db4ad.nmav@hellug.gr> References: <20011030143139.613db4ad.nmav@hellug.gr> Message-ID: <20011030085954.32654861.jnelson@securepipe.com> On Tue, 30 Oct 2001 14:31:39 +0200 "Nikos Mavroyanopoulos" wrote: > I've released gnutls 0.2.9.1 which only corrects a > bug in session resuming of 0.2.9. The tarball unpacks to gnutls-0.2.9 (It is missing the .1) -- Jon Nelson \|/ ____ \|/ Gort, jnelson at securepipe.com "@'/ ,. \`@" Klaatu C and Python Programmer /_| \__/ |_\ barada Motorcycle Enthusiast \__U_/ nikto. From jnelson at securepipe.com Tue Oct 30 15:55:02 2001 From: jnelson at securepipe.com (Jon Nelson) Date: Tue Oct 30 15:55:02 2001 Subject: [gnutls-dev] a few questions Message-ID: <20011030090028.4857af16.jnelson@securepipe.com> gnutls_record.c, in gnutls_send_int, if there is data remaining to be sent from a previous interrupted write, you set cipher to NULL and cipher_size to state->gnutls_internals.send_buffer.size + state->gnutls_internals.send_buffer_prev_size Then, you call _gnutls_write_buffered(cd, state, cipher, cipher_size) However, in gnutls_buffers.c, in _gnutls_write_buffered, the same test (iptr == NULL) is performed (twice, actually): /* 1st test */ if (state->gnutls_internals.send_buffer.size > 0 && iptr != NULL) { gnutls_assert(); return GNUTLS_E_INVALID_PARAMETERS; } /* If data in the buffer exist */ /* second test */ if (iptr == NULL) { if ( state->gnutls_internals.send_buffer.size == 0) { gnutls_assert(); return GNUTLS_E_INVALID_PARAMETERS; } else { ptr = state->gnutls_internals.send_buffer.data; n = state->gnutls_internals.send_buffer.size; } } Technically, the first test is superior on the off-chance that gnutls_internals.send_buffer.size is < 0 However, here you set n (which was cipher_size) to state->gnutls_internals.send_buffer.size; Which is more appropriate? As a precaution, perhaps "n" (cipher_size) could be passed in as -1 from gnutls_buffers.c in the case of handling a previously blocked write -- it might help debugging in the future. -- Jon Nelson \|/ ____ \|/ Gort, jnelson at securepipe.com "@'/ ,. \`@" Klaatu C and Python Programmer /_| \__/ |_\ barada Motorcycle Enthusiast \__U_/ nikto. From nmav at hellug.gr Tue Oct 30 20:39:01 2001 From: nmav at hellug.gr (Nikos Mavroyanopoulos) Date: Tue Oct 30 20:39:01 2001 Subject: [gnutls-dev] a few questions In-Reply-To: <20011030090028.4857af16.jnelson@securepipe.com> References: <20011030090028.4857af16.jnelson@securepipe.com> Message-ID: <20011030213412.5cabe17a.nmav@hellug.gr> On Tue, 30 Oct 2001 09:00:28 -0600 Jon Nelson wrote: > gnutls_record.c, in gnutls_send_int, if there is data remaining to be sent > from a previous interrupted write, you set cipher to NULL and cipher_size > to state->gnutls_internals.send_buffer.size + > state->gnutls_internals.send_buffer_prev_size > /* 1st test */ > if (state->gnutls_internals.send_buffer.size > 0 && iptr != NULL) { > gnutls_assert(); > return GNUTLS_E_INVALID_PARAMETERS; > } > /* If data in the buffer exist > */ > /* second test */ > if (iptr == NULL) { > if ( state->gnutls_internals.send_buffer.size == 0) { > gnutls_assert(); > return GNUTLS_E_INVALID_PARAMETERS; > } else { > ptr = state->gnutls_internals.send_buffer.data; > n = state->gnutls_internals.send_buffer.size; > } > } > Technically, the first test is superior on the off-chance that > gnutls_internals.send_buffer.size is < 0 Yes the second test had no real effect. I've removed that in the cvs. Negative values, are not valid (since the types used are unsigned). > However, here you set n (which was cipher_size) to > state->gnutls_internals.send_buffer.size; > Which is more appropriate? > As a precaution, perhaps "n" (cipher_size) could be passed in as -1 from > gnutls_buffers.c in the case of handling a previously blocked write -- it > might help debugging in the future. These functions are a bit complex... I've done some cleanups in the cvs, but there is more to be done. > -- > Jon Nelson \|/ ____ \|/ Gort, > jnelson at securepipe.com "@'/ ,. \`@" Klaatu > C and Python Programmer /_| \__/ |_\ barada > Motorcycle Enthusiast \__U_/ nikto. -- Nikos Mavroyanopoulos mailto:nmav at hellug.gr From jnelson at securepipe.com Wed Oct 31 15:53:02 2001 From: jnelson at securepipe.com (Jon Nelson) Date: Wed Oct 31 15:53:02 2001 Subject: [gnutls-dev] Various build issues Message-ID: <20011031085744.01ee49de.jnelson@securepipe.com> I have checked out the latest available copy of gnutls, and I can't get it to build. It appears to require autoconf 2.50 which, of course, is not very common or available. Not even RedHat 7.2 has autoconf 2.50 available. Would it be possible to convert the configure stuff to use autoconf 2.13 which is far more common? -- Jon Nelson \|/ ____ \|/ Gort, jnelson at securepipe.com "@'/ ,. \`@" Klaatu C and Python Programmer /_| \__/ |_\ barada Motorcycle Enthusiast \__U_/ nikto. From jnelson at securepipe.com Wed Oct 31 15:57:01 2001 From: jnelson at securepipe.com (Jon Nelson) Date: Wed Oct 31 15:57:01 2001 Subject: [gnutls-dev] CVS commits Message-ID: <20011031090211.573c5424.jnelson@securepipe.com> I've subscribed to the cvs-commits mailing list, and have also been browsing the cvs repository online. I notice quite a few empty log messages in the archive, but there are (usually) actual changes to the files. Empty log messages aren't especially useful -- can an effort be made to use more descriptive / useful cvs commit messages? This is for posterity, you know. -- Jon Nelson \|/ ____ \|/ Gort, jnelson at securepipe.com "@'/ ,. \`@" Klaatu C and Python Programmer /_| \__/ |_\ barada Motorcycle Enthusiast \__U_/ nikto. From nmav at hellug.gr Wed Oct 31 17:25:01 2001 From: nmav at hellug.gr (Nikos Mavroyanopoulos) Date: Wed Oct 31 17:25:01 2001 Subject: [gnutls-dev] Various build issues In-Reply-To: <20011031085744.01ee49de.jnelson@securepipe.com> References: <20011031085744.01ee49de.jnelson@securepipe.com> Message-ID: <20011031182031.2309a7d9.nmav@hellug.gr> On Wed, 31 Oct 2001 08:57:44 -0600 Jon Nelson wrote: > I have checked out the latest available copy of gnutls, and > I can't get it to build. It appears to require autoconf > 2.50 which, of course, is not very common or available. > Not even RedHat 7.2 has autoconf 2.50 available. Would it be > possible to convert the configure stuff to use autoconf 2.13 > which is far more common? You can download it, from any gnu mirror. Debian (woody) has autoconf2.50 package. > -- > Jon Nelson \|/ ____ \|/ Gort, > jnelson at securepipe.com "@'/ ,. \`@" Klaatu > C and Python Programmer /_| \__/ |_\ barada > Motorcycle Enthusiast \__U_/ nikto. -- Nikos Mavroyanopoulos mailto:nmav at hellug.gr From wk at gnupg.org Wed Oct 31 17:42:02 2001 From: wk at gnupg.org (Werner Koch) Date: Wed Oct 31 17:42:02 2001 Subject: [gnutls-dev] CVS commits In-Reply-To: <20011031090211.573c5424.jnelson@securepipe.com> (Jon Nelson's message of "Wed, 31 Oct 2001 09:02:11 -0600") References: <20011031090211.573c5424.jnelson@securepipe.com> Message-ID: <87668v3gof.fsf@alberti.gnupg.de> On Wed, 31 Oct 2001 09:02:11 -0600, Jon Nelson said: > actual changes to the files. Empty log messages aren't especially > useful -- can an effort be made to use more descriptive / useful > cvs commit messages? This is for posterity, you know. BTW, given that GNUTLS is in a usable state, I'd very much like to see ChangeLogs entries. Yes, I know that this is some work but after a while it is even for the author a very valuable source of information. Ciao, Werner -- Werner Koch Omnis enim res, quae dando non deficit, dum habetur g10 Code GmbH et non datur, nondum habetur, quomodo habenda est. Privacy Solutions -- Augustinus From nmav at hellug.gr Wed Oct 31 23:20:02 2001 From: nmav at hellug.gr (Nikos Mavroyanopoulos) Date: Wed Oct 31 23:20:02 2001 Subject: [gnutls-dev] CVS commits In-Reply-To: <87668v3gof.fsf@alberti.gnupg.de> References: <20011031090211.573c5424.jnelson@securepipe.com> <87668v3gof.fsf@alberti.gnupg.de> Message-ID: <20011101001450.00ab5276.nmav@hellug.gr> On Wed, 31 Oct 2001 17:41:52 +0100 Werner Koch wrote: > > actual changes to the files. Empty log messages aren't especially > > useful -- can an effort be made to use more descriptive / useful > > cvs commit messages? This is for posterity, you know. > BTW, given that GNUTLS is in a usable state, I'd very much like to see > ChangeLogs entries. Yes, I know that this is some work but after a > while it is even for the author a very valuable source of information. What do you mean by ChangeLogs entries? ChangeLog is created using the cvs log (it might not be complete but most of the changes are documented). > Ciao, > Werner > -- > Werner Koch Omnis enim res, quae dando non deficit, dum habetur > g10 Code GmbH et non datur, nondum habetur, quomodo habenda est. > Privacy Solutions -- Augustinus -- Nikos Mavroyanopoulos mailto:nmav at hellug.gr