Package: tinyca
Version: 0.7.2-1
Severity: normal
Tags: patch

Hi,

It looks like openssl 0.9.8 changed the default for fingerprints to
SHA1.
This leads to "undef" warnings when MD5 fingerprints are usedin tinyca2
in Debian testing.

The attached patch fixes the issue by
* adding option '-md5' to the openssl call that reads the fingerprint
* pre-defining the object attributes FINGERPRINTMD5 & FINGERPRINTSHA1
  to "" (this is not absolutely necessary, just in case ...)

Plase apply.

Thanks for writing and packaging TinyCA2
Peter


-- System Information:
Debian Release: testing/unstable
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (500, 'stable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.15-1-k7
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)

Versions of packages tinyca depends on:
ii  libgtk2-perl                  1:1.104-1  Perl interface to the 2.x series o
ii  liblocale-gettext-perl        1.05-1     Using libc functions for internati
ii  openssl                       0.9.8a-7   Secure Socket Layer (SSL) binary a

Versions of packages tinyca recommends:
ii  zip                           2.31-3     Archiver for .zip files

-- no debconf information
--- lib/OpenSSL.pm
+++ lib/OpenSSL.pm      2006-04-04 12:38:24.000000000 +0200
@@ -637,8 +637,9 @@
    # get extensions
    $tmp->{'EXT'} = HELPERS::parse_extensions([EMAIL PROTECTED], "cert");
 
-   # get fingerprint 
-   $cmd = "$self->{'bin'} x509 -noout -fingerprint -in $file";
+   # get MD5 & SHA1 fingerprints
+   $tmp->{'FINGERPRINTMD5'} = '';
+   $cmd = "$self->{'bin'} x509 -noout -fingerprint -md5 -in $file";
    my($rdfh, $wtfh);
    $ext = "$cmd\n\n";
    $pid = open3($wtfh, $rdfh, $rdfh, $cmd);
@@ -656,6 +657,7 @@
       GUI::HELPERS::print_warning($t, $ext);
    }
 
+   $tmp->{'FINGERPRINTSHA1'} = '';
    $cmd = "$self->{'bin'} x509 -noout -fingerprint -sha1 -in $file";
    $ext = "$cmd\n\n";
    $pid = open3($wtfh, $rdfh, $rdfh, $cmd);

Reply via email to