I also had error like Jonathan and Alexei (http://sourceforge.net/mailarchive/forum.php?thread_id=3580885&forum_id=2291 and http://sourceforge.net/mailarchive/forum.php?thread_id=3580925&forum_id=2291). I couldn't issue Certificate (more precisely when I tried to issue certificate I got a blank page). I found bug in OpenCA-OpenSSL module after hours of debugging and Internet search. The cause of bug was inappropriate initialization of memory BIO in OpenSSL.xs (BIO_read was unable to find EOF). The problem was in function "OpenCA::OpenSSL:X509:_new_from_pem" when function tried to read to long certificate (if certificate was longer than 1024 bytes BIO_read read only first 720). I've solved the problem using memory BIO initialization before use of BIO_read function (BIO_set_mem_eof_return(bio_in, 0);). You can find more information about the problem on this link http://www.mail-archive.com/[EMAIL PROTECTED]/msg16733.html
Regards, Albert
And Happy New Year!
Albert Novak
Croatian Academic and Research Network - CARNet
--- openca-0.9.20031217.orig/src/modules/openca-openssl/OpenSSL.xs +++ openca-0.9.20031217/src/modules/openca-openssl/OpenSSL.xs @@ -50,6 +50,9 @@ /* load encoded data into bio_in */ BIO_write(bio_in, pemcert+27, certlen-27-25);
+ /* set EOF for memory bio */
+ BIO_set_mem_eof_return(bio_in, 0);
+
/* decode data from one bio into another one */
BIO_push(b64, bio_in);
while((inlen = BIO_read(b64, inbuf, 512)) > 0)
@@ -496,6 +499,9 @@
/* load encoded data into bio_in */
BIO_write(bio_in, pemcrl+25, crllen-25-23);+ /* set EOF for memory bio */
+ BIO_set_mem_eof_return(bio_in, 0);
+
/* decode data from one bio into another one */
BIO_push(b64, bio_in);
while((inlen = BIO_read(b64, inbuf, 512)) > 0)
@@ -962,6 +968,9 @@
/* load encoded data into bio_in */
BIO_write(bio_in, pemcsr+36, csrlen-36-34);+ /* set EOF for memory bio */
+ BIO_set_mem_eof_return(bio_in, 0);
+
/* decode data from one bio into another one */
BIO_push(b64, bio_in);
while((inlen = BIO_read(b64, inbuf, 512)) > 0)
------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
