Michael Richardson

I read the test scan: yes, tcpdump is careful to give up setuid/setgid bits, if the installer wants to install it that way, but it isn't installed setuid by default...

Again, tcpdump has support for setuid, and one some platforms it is installed in this way so that group permissions can be used to enable un-privileged capture (via group membership),...

Benoit Plessis wrote: > Just made some tests yesterday on this, the code does read DER-encoded > private key, but not DER-encoded-and-encrypted (pkcs8 der). It promises to read DER encoded...

Thank you so much for the reply. I will comment in the issue as requested, but I'll do so in email so that I can CC the openssl-users list. Kazuki...

I have revised the code: - retains the critical check - includes the nid lookup you suggested - moves all declations to the top.

I will investigate adding a regress test case for this, can you give me an example of the nid lookup that would not have worked without the ln2nid() call?

Just say that I haven't lost track of this. I just had less time/energy while travelling than I thought I would.

@mpalmer , I have also been frustrated by slow turn around, but I also understand things from the other side of the fence (tcpdump and libpcap is way behind, and...

RFC5280 has an example, which is available at: https://csrc.nist.gov/projects/pki-testing/sample-certificates-and-crls you want example C.2. Download it as rfc5280_cert2.cer. Start an irb: > cert = OpenSSL::X509::Certificate.new(IO::read("rfc5280_cert2.cer")) 2.4.1 :005 > cert.extensions[1].to_s => "subjectKeyIdentifier...

@hsbt I would appreciate any pointers on how to debug the memory leak that the travis-ci build discovered.