Hello !

I found the following bug (Micro$oft would call it a feature):

# openssl version 
OpenSSL 0.9.7 31 Dec 2002
#

I  created a CA (standard demoCA) 
# CA.sh -newca
<seems OK>

I created a req using 
# CA.sh -newreq
<seems OK>

I signed the req using
# CA.sh -sign
<seems OK>

When generating a crl the following happened :

# openssl ca -gencrl
Using configuration from /usr/local/ssl/openssl.cnf
Enter pass phrase for ./demoCA/private/cakey.pem:<pass entered>
-----BEGIN X509 CRL-----
<snip>
-----END X509 CRL-----
Segmentation fault
#

The revocation list between ----BEGIN X509 CRL----- and ----END X509 CRL----- seems 
usable if copied from console into a file "crls.pem"

Trying -out option gives:

# openssl ca -gencrl -out crls.pem
Using configuration from /usr/local/ssl/openssl.cnf
Enter pass phrase for ./demoCA/private/cakey.pem:<pass entered>
Segmentation fault
#

Just to report this undesirable behaviour. If you'd need more contact info, you may 
contact me via email: [EMAIL PROTECTED] 
If I made a mistake, i'd be very pleased for getting some answers, too.

Thank you for providing openssl !

Regards,
      Martin


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to