The fact is that your copy of OpenSSL is linked against RSARef which as I understand, is much less optimized (read slower) than OpenSSL's RSA implementation, and was only ever used (AFAIK) to satisfy a legal requirement as far as patent protection goes, which is now a non issue.
Why would you want to use this? Do you konw why this was built that way? Why not just extract the OpenSSL from the FreeBSD 4.4 distribution and put it back on your system? Tim ----- Original Message ----- From: "dirk van der Giesen" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, March 12, 2002 1:19 PM Subject: Re: Unable to find an RSAREF shared library (librsaref.so) > Ok Tim Michael, > > thanks, > > But... what has the fact that freeBSD has openSSl > build in to do with this errormessage? > > Do you mean it has already a CRS file generated > somewhere for somebody to sign, and generated my own > private key at installing > > Every openssl (even the one in usr/bin) version gives > me the errormessage, when i run "openssl req -new > -nodes -keyout private.key -out public.csr" > > Is there a different way to call for a different crypt > method? Is RSA than the default method? > How do i know which one i am allowed to use and am i > free to choose one? > This goes unfortunately beyond my comprehension. > > I know how to execute some commands and give some > arguments to try out, but if one off you has some more > advise what might be going on it would be much > appriciated ofcourse. > > masha danki, > > Dirk > > --- Tim Pushor <[EMAIL PROTECTED]> wrote: > > IIRC RSARef was RSA Labs reference implementation > > library. You needed it > > inside the US because the RSA algorithms were > > patented and it could have > > been illegal to use OpenSSL's. The patent has since > > expired and you no > > longer need RSARef. > > > > FreeBSD 4.4 has OpenSSL build in, why are you using > > the port? > > > > Tim > > ----- Original Message ----- > > From: "dirk van der Giesen" <[EMAIL PROTECTED]> > > To: <[EMAIL PROTECTED]> > > Sent: Tuesday, March 12, 2002 11:05 AM > > Subject: Unable to find an RSAREF shared library > > (librsaref.so) > > > > > > > Dear Users > > > > > > I try to create a CA for Verisign to sign on > > freeBSD > > > 4.4 which has openssl installed in /usr/local/ssl > > > > > > First i had the some kind of problem with the > > config > > > file (openssl.cnf) which it couldn't find and i > > solved > > > like this: > > > > > > "openssl req -new -nodes -keyout private.key -out > > > public.csr -config ../openssl.cnf" > > > > > > then i got this... > > > > > > "Using configuration from ../openssl.cnf > > > Generating a 1024 bit RSA private key > > > ......+++++ > > > ..+++++ > > > writing new private key to 'private.key' > > > -----" > > > etc. etc.... > > > > > > I could enter all kinds of stuff and after my > > password > > > assignment it failed/ended with the folowing > > > errormessage: > > > > > > ** RSAPrivateEncrypt: Unable to find an RSAREF > > shared > > > library (librsaref.so). > > > ** Install the /usr/ports/security/rsaref port or > > > package and run this > > > ** program again. See Chapter 6.5 in the FreeBSD > > > Handbook, located at > > > ** http://www.freebsd.org/handbook/openssl.html, > > for > > > more information. > > > 74022:error:0D072006:asn1 encoding > > > routines:ASN1_sign:bad get asn1 object > > > > > > call:/usr/src/secure/lib/libcrypto/../../../crypto/openssl/crypto/asn1/a_sig > > n.c:126: > > > > > > > > > Thanks in advance, > > > > > > Dirk van der Giesen > > > Curacao > > > (Netherlands Antilles) > > > > > > > > > __________________________________________________ > > > Do You Yahoo!? > > > Try FREE Yahoo! Mail - the world's greatest free > > email! > > > http://mail.yahoo.com/ > > > > > > ______________________________________________________________________ > > > OpenSSL Project > > http://www.openssl.org > > > User Support Mailing List > > [EMAIL PROTECTED] > > > Automated List Manager > > [EMAIL PROTECTED] > > > > > > > > ______________________________________________________________________ > > OpenSSL Project > > http://www.openssl.org > > User Support Mailing List > > [EMAIL PROTECTED] > > Automated List Manager > > [EMAIL PROTECTED] > > > > > > > > > __________________________________________________ > Do You Yahoo!? > Try FREE Yahoo! Mail - the world's greatest free email! > http://mail.yahoo.com/ > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List [EMAIL PROTECTED] > Automated List Manager [EMAIL PROTECTED] > ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
