We are using 1.1.1d on our production server, which is a debian buster.

Here we get the result

bytes {} tag 1e58277931d45f4c593cffbf291b39b7

On our newer system with openssl 1.1.1k

bytes dbf5a0d98c8b32e1b6dccc tag 81294002f4a5df64c8a44e1bcc07a6cb

The call was:

ns_crypto::aead::encrypt string -cipher aes-128-gcm -iv 123456789 -key secret "hello world"


I've tried to use 1.1.1k on buster. I installed it with

./config --prefix=/usr/local/openssl && make && make install

and compiled naviserver with

./configure --enable-64bit=true--prefix=/usr/local/naviserver-git--with-openssl=/usr/local/openssl--with-tcl=/usr/local/lib/--enable-threads

But naviserver still uses the packaged openssl version:
# ldd nsd/nsd
libssl.so.1.1 => /usr/lib/x86_64-linux-gnu/libssl.so.1.1

Regards,

Wolfgang


Am 07.12.21 um 17:16 schrieb Gustaf Neumann:


On 07.12.21 14:40, Wolfgang Winkler via naviserver-devel wrote:
We also tried the demo here:

https://openacs.org/webpush-demo/webpush-demo.tcl

The empty message works ("Naviserver rocks!"), but with a message, we get an error:

"could not derive EC point from provided key could not derive EC point from provided key "

you are right, something seems broken at least at openacs.org. The regression test of nswebpush fails at openacs.org  (but succeeds on my local machine). ... so maybe there is a version dependency.

What version of OpenSSL are you using?

-gn

PS: it will take probably until the weekend to get some time in a block to looking this.



_______________________________________________
naviserver-devel mailing list
naviserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/naviserver-devel
--

*Wolfgang Winkler*
Geschäftsführung
wolfgang.wink...@digital-concepts.com
mobil +43.699.19971172

dc:*büro*
digital concepts Novak Winkler OG
Software & Design
Landstraße 68, 5. Stock, 4020 Linz
www.digital-concepts.com <http://www.digital-concepts.com>
tel +43.732.997117.72
tel +43.699.1997117.2

Firmenbuchnummer: 192003h
Firmenbuchgericht: Landesgericht Linz

_______________________________________________
naviserver-devel mailing list
naviserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/naviserver-devel

Reply via email to