RE: Please help..

["Rob Nicholls" <robert () everythingeverything co uk>]

I've basically followed the instructions mentioned here:
http://www.ski-epic.com/2007_notes_on_openssl/index.html

I used the latest (openssl-0.9.8h) source code and appeared to have to
comment out a random looking "16" from the top of s1_win32.asm to make it
all compile (using VS.NET 2003). I also had to change the CFLAG line in
ntdll.mak to say /MT instead of /MD so that the files would be statically
(instead of dynamically) linked and therefore shouldn't require msvcrXX.dll:

CFLAG= /MT /Ox /O2 /Ob2 /W3 /WX /Gs0 /GF /Gy /nologo -DOPENSSL_SYSNAME_WIN32
-DWIN32_LEAN_AND_MEAN -DL_ENDIAN -DDSO_WIN32 -D_CRT_SECURE_NO_DEPRECATE
-D_CRT_NONSTDC_NO_DEPRECATE -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2
-DAES_ASM -DBN_ASM -DOPENSSL_BN_ASM_PART_WORDS -DMD5_ASM -DSHA1_ASM
-DRMD160_ASM -DOPENSSL_USE_APPLINK -I. /Fdout32dll -DOPENSSL_NO_CAMELLIA
-DOPENSSL_NO_SEED -DOPENSSL_NO_RC5 -DOPENSSL_NO_MDC2 -DOPENSSL_NO_TLSEXT
-DOPENSSL_NO_CMS -DOPENSSL_NO_KRB5 -DOPENSSL_NO_DYNAMIC_ENGINE    

A quick "nmake -f ms\ntdll.mak" and "nmake-f ms\ntdll.mak install" later and
I've got some binaries - depends.exe doesn't appear to indicate that
msvcr71.dll (or msvcr80.dll for those running VS2005) is required. I did a
quick switch of the DLLs on Vista and Nmap still seems to work okay - the
NSE scripts seem to detect the title and robots.txt okay against Microsoft's
HTTPS server. I'll see if I can find a relatively clean VM running XP to
test the files properly tomorrow morning. It looks promising, and would
hopefully be easier than supplying the Visual C++ runtime components.


Rob


> -----Original Message-----
> From: Rob Nicholls [mailto:robert () everythingeverything co uk]
> Sent: 10 June 2008 23:39
> To: 'Fyodor'; 'Michael Pattrick'
> Cc: nmap-dev () insecure org
> Subject: RE: Please help..
>
> > -----Original Message-----
> > From: Fyodor [mailto:fyodor () insecure org]
> <snip>
> > Hi Michael (and Rob).  Do you know which exact DLLs we need?  Does
> > this requirement come from the new Windows SSL support
>
> I just quickly ran depends.exe and it looks like the two OpenSSL DLLs
> we're
> now providing with Nmap require msvcr80.dll to be present. I suspect we
> could solve the problem if Kris (or someone) uses static linking when
> the
> OpenSSL DLLs are compiled before they're added to the
> mswin32\OpenSSL\bin
> folder, but we're reaching the limits of my knowledge now.
>
>
> Rob
>
>
> _______________________________________________
> Sent through the nmap-dev mailing list
> http://cgi.insecure.org/mailman/listinfo/nmap-dev
> Archived at http://SecLists.Org


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org