Hi there,
I have just done a complete install of OpenSSL 0.9.5a, on an IBM RS/6000
running AIX 4.3.3.
Everything's gone pretty well except for the make test. I did the "config"
with the following parameters:-
./config \
--prefix=/openssl \
no-bf no-cast no-dh no-dsa no-md2 no-mdc2 no-rc5 no-ripemd no-idea
This ran fine, as did the "make". However, the "make test " threw up three
errors, which appear to be down to the use of "no-dsa" in the config step.
I made the following three changes which circumvented the problem. From the
commented testssl code, this seemed to be a valid thing to do. Was I
correct? Following these changes, the "make test" and "make install" ran
fine.
All changes were made to testssl in the /test directory
Firstly:-
if [ $dsa_cert = NO ]; then
echo test sslv2/sslv3 w/o DHE via BIO pair
$ssltest -bio_pair -no_dhe || exit 1
fi
echo test sslv2/sslv3 with 1024bit DHE via BIO pair
$ssltest -bio_pair -dhe1024dsa -v || exit 1
was replaced with
if [ $dsa_cert = NO ]; then
echo test sslv2/sslv3 w/o DHE via BIO pair
$ssltest -bio_pair -no_dhe || exit 1
else
echo test sslv2/sslv3 with 1024bit DHE via BIO pair
$ssltest -bio_pair -dhe1024dsa -v || exit 1
fi
Next,
echo test tls1 with 1024bit anonymous DH, multiple handshakes
$ssltest -v -bio_pair -tls1 -cipher ADH -dhe1024dsa -num 10 -f -time || exit
1
was replaced with
if [ $dsa_cert = YES ]; then
echo test tls1 with 1024bit anonymous DH, multiple handshakes
$ssltest -v -bio_pair -tls1 -cipher ADH -dhe1024dsa -num 10 -f -time ||
exit 1
fi
and lastly
echo test tls1 with 1024bit RSA, 1024bit DHE, multiple handshakes
./ssltest -v -bio_pair -tls1 -cert ../apps/server2.pem -dhe1024dsa -num 10
-f
-time || exit 1
was replaced with
if [ $dsa_cert = YES ]; then
echo test tls1 with 1024bit RSA, 1024bit DHE, multiple handshakes
./ssltest -v -bio_pair -tls1 -cert ../apps/server2.pem -dhe1024dsa -num
10 -f
-time || exit 1
fi
I am also attaching the output from "make report", as requested in your
INSTALL docs.
<<make report.cap>>
Lastly, the INSTALL docs mention the option to run "make depend" if one
makes use of the no-<cipher> parameters in the "config" step. What exactly
is the effect of this step, and when should it be run? Before the "make"?
Before the "make test"? Before the "make install"? Or after everything
else has completed?
Many thanks, and regards,
Bob Draper,
Solutions Architect, Syntegra
Spitfire House, 141 Davigdor Road
Hove, Sussex BN3 1RE, UK
Tel. +44 (0)1273 762516
Fax. +44 (0)1273 326475
mailto:[EMAIL PROTECTED]
make report.cap
