The bug does appear on OSX 10.5.6 (openssl-SNAP-20090207) with the following command line: ./config threads shared no-sse2 enable-whrlpool enable-montasm enable-capieng enable-cms enable-seed enable-tlsext enable-camellia enable-rfc3779 enable-mdc2 enable-rc5 --prefix=/$HOME/ossl --openssldir=$HOME/ossl
[...] Generate and verify a certificate request generating certificate request rsa There should be a 2 sequences of .'s and some +'s. There should not be more that at most 80 per line This could take some time. Generating a 512 bit RSA private key ........................++++++++++++ ..........++++++++++++ writing new private key to 'testkey.pem' ----- You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter '.', the field will be left blank. ----- Country Name (2 letter code) [AU]:AU State or Province Name (full name) [Queensland]: Locality Name (eg, city) []:Brisbane Organization Name (eg, company) []:CryptSoft Pty Ltd Organizational Unit Name (eg, section) []:. Common Name (eg, YOUR name) []:Eric Young Email Address []:[email protected] 2693744484:error:0D0C30C6:asn1 encoding routines:ASN1_item_sign:digest and key type not supported:a_sign.c:245: problems creating request make[1]: *** [test_gen] Error 1 make[1]: Leaving directory `/Users/kyanha/workspace/ossl/snap/openssl-SNAP-20090207/test' make: *** [tests] Error 2 It also appears with the following command-line: ./config --prefix=$HOME/ossl --openssldir=$HOME/ossl -Kyle H ---------- Forwarded message ---------- From: Dr. Stephen Henson <[email protected]> Date: Sat, Feb 7, 2009 at 2:30 AM Subject: Re: Openssl-SNAP still erroring out To: [email protected] On Fri, Feb 06, 2009, Kyle Hamilton wrote: > This does not appear on MacOSX 10.5.6 (with 0.9.8-stable-SNAP-20090206). > > ./config threads shared no-sse2 enable-whrlpool enable-montasm > enable-capieng enable-cms enable-seed enable-tlsext enable-camellia > enable-rfc3779 enable-mdc2 enable-rc5 zlib-dynamic > --prefix=/usr/contrib --openssldir=/usr/contrib > You'd need to try the 0.9.9 snapshots to check the reported error. That bit of code (the EVP_PKEY APIs) isn't in 0.9.8. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [email protected] Automated List Manager [email protected] ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [email protected] Automated List Manager [email protected]
