RE: IMPORTANT: please test snapshot openssl-0.9.7-stable-SNAP-20030214.tar.gz(fwd)
It compiles and all tests passed on SCO Openserver 5.0.6A using gcc-3.2.2 __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
Small patch to Configure for SCO Openserver
For the last few weeks, I have not been able to compile the cvs version of
the openssl suite. This morning I had time to track it down. sco5-gcc and
sco5-cc both need -DNO_ASM defined by default. I compiled it with this
tweek and ran all the test suite without problems. I am including the
universal patch to Configure to make this happen.
--- Configure.orig Fri Dec 29 06:14:14 2000
+++ Configure Fri Dec 29 06:45:05 2000
@@ -374,8 +374,8 @@
# SCO 5 - Ben Laurie [EMAIL PROTECTED] says the -O breaks the
# SCO cc.
-"sco5-cc", "cc:::(unknown):-lsocket:${x86_gcc_des} ${x86_gcc_opts}:::", # des
options?
-"sco5-gcc", "gcc:-O3 -fomit-frame-pointer::(unknown):-lsocket:BN_LLONG
${x86_gcc_des} ${x86_gcc_opts}:::", # the SCO assembler doesn't seem to like our
assembler files ...
+"sco5-cc", "cc:-DNO_ASM::(unknown):-lsocket:${x86_gcc_des} ${x86_gcc_opts}:::", #
+des options?
+"sco5-gcc", "gcc:-O3 -fomit-frame-pointer -DNO_ASM::(unknown):-lsocket:BN_LLONG
+${x86_gcc_des} ${x86_gcc_opts}:::", # the SCO assembler doesn't seem to like our
+assembler files ...
# Sinix/ReliantUNIX RM400
# NOTE: The CDS++ Compiler up to V2.0Bsomething has the IRIX_CC_BUG optimizer
problem. Better use -g */
--
Phillip P. Porch [EMAIL PROTECTED] NIC:PP1573 finger for
http://www.theporch.com UTM - 16 514546E 3994565N GnuPG key
__
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
Problems compiling current cvs with SCO
+ rm -f libcrypto + rm -f libssl Undefined first referenced symbol in file bn_sub_part_words ../libcrypto.a(bn_mul.o) openssl: fatal error: Symbol referencing errors. No output written to openssl collect2: ld returned 1 exit status make[1]: *** [openssl] Error 1 make: *** [sub_all] Error 1 Seems there is an undefined symbol. Suggestions? -- Phillip P. Porch [EMAIL PROTECTED] NIC:PP1573 finger for http://www.theporch.com UTM - 16 514546E 3994565N GnuPG key __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
Re: ANNOUNCE: OpenSSL 0.9.6 Beta 1
The cvs version tonight compiles fine with SCO Openserver 5.0.5 and the test suite was perfect after configuring it with sco5-gcc. The test with sco5-cc is now in progress. -- Phillip P. Porch [EMAIL PROTECTED] NIC:PP1573 finger for http://www.theporch.com UTM - 16 514546E 3994565N GnuPG key __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
Error in SSL test
I am using todays cvs update and compiled it fine with Openserver 5.0.5 but when I ran the test suite found the following: test SSL protocol test sslv2 ERROR in CLIENT 14699:error:2008007F:BIO routines:MEM_READ:eof on memory bio:bss_mem.c:170: SSLv2, cipher (NONE) (NONE) make[1]: *** [test_ssl] Error 1 make[1]: Leaving directory `/software/openssl/test' make: *** [tests] Error 2 -- Phillip P. Porch [EMAIL PROTECTED] NIC:PP1573 finger for http://www.theporch.com UTM - 16 514546E 3994565N GnuPG key __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
Re: problem with openssl
On Thu, 24 Aug 2000, Ing. Tibor SUJAN wrote: Date: Thu, 24 Aug 2000 11:06:38 +0100 From: Ing. Tibor SUJAN [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: problem with openssl I tryed to compile openssl package at SCO openserver v5.0.5 and 'make test' finished with error Failed! bc: 1 is unimplemented.. make[2]: *** [test_bn] Error 255 where is problem? thanks The problem is that the bc that Openserver has does not work for this. You need to get and install Gnu's bc. ftp://ftp.gnu.org/pub/gnu/bc Tibor SUJAN complete testlog OpenSSL self-test report: OpenSSL version: 0.9.5a Last change: Make sure _lrotl and _lrotr are only used with MSVC OS (uname): SCO_SV sttk 3.2 5.0.5 i386 OS (config): whatever-whatever-sco5 Target (default): sco5-gcc Target: sco5-gcc Compiler: gcc version 2.95.2 19991024 (release) Failure! - make[1]: Entering directory `/usr/tibor/openssl-0.9.5a' making all in crypto... make[2]: Entering directory `/usr/tibor/openssl-0.9.5a/crypto' making all in crypto/md2... make[3]: Entering directory `/usr/tibor/openssl-0.9.5a/crypto/md2' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/usr/tibor/openssl-0.9.5a/crypto/md2' making all in crypto/md5... make[3]: Entering directory `/usr/tibor/openssl-0.9.5a/crypto/md5' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/usr/tibor/openssl-0.9.5a/crypto/md5' making all in crypto/sha... make[3]: Entering directory `/usr/tibor/openssl-0.9.5a/crypto/sha' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/usr/tibor/openssl-0.9.5a/crypto/sha' making all in crypto/mdc2... make[3]: Entering directory `/usr/tibor/openssl-0.9.5a/crypto/mdc2' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/usr/tibor/openssl-0.9.5a/crypto/mdc2' making all in crypto/hmac... make[3]: Entering directory `/usr/tibor/openssl-0.9.5a/crypto/hmac' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/usr/tibor/openssl-0.9.5a/crypto/hmac' making all in crypto/ripemd... make[3]: Entering directory `/usr/tibor/openssl-0.9.5a/crypto/ripemd' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/usr/tibor/openssl-0.9.5a/crypto/ripemd' making all in crypto/des... make[3]: Entering directory `/usr/tibor/openssl-0.9.5a/crypto/des' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/usr/tibor/openssl-0.9.5a/crypto/des' making all in crypto/rc2... make[3]: Entering directory `/usr/tibor/openssl-0.9.5a/crypto/rc2' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/usr/tibor/openssl-0.9.5a/crypto/rc2' making all in crypto/rc4... make[3]: Entering directory `/usr/tibor/openssl-0.9.5a/crypto/rc4' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/usr/tibor/openssl-0.9.5a/crypto/rc4' making all in crypto/rc5... make[3]: Entering directory `/usr/tibor/openssl-0.9.5a/crypto/rc5' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/usr/tibor/openssl-0.9.5a/crypto/rc5' making all in crypto/idea... make[3]: Entering directory `/usr/tibor/openssl-0.9.5a/crypto/idea' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/usr/tibor/openssl-0.9.5a/crypto/idea' making all in crypto/bf... make[3]: Entering directory `/usr/tibor/openssl-0.9.5a/crypto/bf' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/usr/tibor/openssl-0.9.5a/crypto/bf' making all in crypto/cast... make[3]: Entering directory `/usr/tibor/openssl-0.9.5a/crypto/cast' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/usr/tibor/openssl-0.9.5a/crypto/cast' making all in crypto/bn... make[3]: Entering directory `/usr/tibor/openssl-0.9.5a/crypto/bn' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/usr/tibor/openssl-0.9.5a/crypto/bn' making all in crypto/rsa... make[3]: Entering directory `/usr/tibor/openssl-0.9.5a/crypto/rsa' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/usr/tibor/openssl-0.9.5a/crypto/rsa' making all in crypto/dsa... make[3]: Entering directory `/usr/tibor/openssl-0.9.5a/crypto/dsa' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/usr/tibor/openssl-0.9.5a/crypto/dsa' making all in crypto/dh... make[3]: Entering directory `/usr/tibor/openssl-0.9.5a/crypto/dh' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/usr/tibor/openssl-0.9.5a/crypto/dh' making all in crypto/buffer... make[3]: Entering directory `/usr/tibor/openssl-0.9.5a/crypto/buffer' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/usr/tibor/openssl-0.9.5a/crypto/buffer' making all in crypto/bio... make[3]: Entering directory `/usr/tibor/openssl-0.9.5a/crypto/bio' make[3]: Nothing to be done for
Problems with the pkcs7 testsuite
The current CVS (current as of 8/24/00) compiles fine with SCO Openserver 5.0.5 but when running the testsuite, I received the following message. This was working fine on 8/18/00. Any suggestions on tracking this down? testing pkcs7 conversions p - d p - p d - d p - d d - p p - p fff.p f.p differ: char 25, line 2 make[1]: *** [test_pkcs7] Error 1 make[1]: Leaving directory `/software/openssl/test' make: *** [tests] Error 2 -- Phillip P. Porch [EMAIL PROTECTED] NIC:PP1573 finger for http://www.theporch.com UTM - 16 514546E 3994565N GnuPG key __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
current cvs problem with certificates
I updated my cvs snapshot of the openssl package and compiled it without any problems on a sco openserver 5.0.5 system with both cc and gcc. I ran the test suite and to my suprise, had it fail testing. It was at the test normal x509v1 certificate part and quit. I ran the tx509 test by hand and received the following output: testing X509 conversions p - d p - n p - p d - d unable to load certificate 5262:error:0D0A0007:asn1 encoding routines:d2i_X509_ALGOR:expecting an asn1 sequence:x_algor.c:85:address=4495337 offset=0 5262:error:0D0A2004:asn1 encoding routines:d2i_X509_CINF:nested asn1 error:x_cinf.c:123:address=4495328 offset=9 5262:error:0D09F004:asn1 encoding routines:d2i_X509:nested asn1 error:x_x509.c:102:address=4495324 offset=4 This was working fine less than a week ago. Any suggestions on tracking this down and fixing this bug? -- Phillip P. Porch [EMAIL PROTECTED] NIC:PP1573 finger for http://www.theporch.com UTM - 16 514546E 3994565N PGP key __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
Re: SCO Openserver 5.0.5
On Mon, 5 Jun 2000, Ben Laurie wrote: Phillip Porch wrote: I changed all the c.##kname constructs to c.kname and it compiles and tests fine with the native compiler. I then compiled it with the gcc compiler and it again did it without problems. I don't think the c.##kname is necessary and will include a patch below to remove it. If you find that it works for you, it will keep the current cvs from breaking the native cc compiler for SCO Openserver. If you want to leave what you have alone, I would be happy to submit a small change to the Configure script and the evp_locl.h file to add a flag -DSCO and include the alternate code if defined. Interesting ... that code has not actually changed in living memory (OK, I added a "const" two lines before), so it is curious that it suddenly causes a problem. Anyway, I totally agree that the ## is not needed. The previous cvs version that I was using did not have a evp_locl.h. That file is what broke it for me. -- Phillip P. Porch [EMAIL PROTECTED] NIC:PP1573 finger for http://www.theporch.com UTM - 16 514546E 3994565N PGP key __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
Re: SCO Openserver 5.0.5
On Mon, 5 Jun 2000, Dr Stephen Henson wrote: Erm I created it about a week ago as part of the major EVP revision. I dunno maybe people have shorter memories these days. I'll be pleasantly surprised if that's the only thing it has broken. I agree with the fix. Nice to see someone test the snapshots out rather than a hour after a big release :-) Steve. Thanks for a great program. Glad to make my small contribution.. plus learn something about the preprocessor while doing that. -- Phillip P. Porch [EMAIL PROTECTED] NIC:PP1573 finger for http://www.theporch.com UTM - 16 514546E 3994565N PGP key __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
SCO Openserver 5.0.5
Ben, after some trial and error and help from Richard Levitte in getting
on the right track, I found the problem that kept openssl (current
cvs) from compiling with the native compiler.
The problem is with the crypto/evp/evp_locl.h file
#define BLOCK_CIPHER_ecb_loop() \
unsigned int i; \
if(inl 8) return 1;\
inl -= 8; \
for(i=0; i = inl; i+=8) \
#define BLOCK_CIPHER_func_ecb(cname, cprefix, kname) \
static int cname##_ecb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out, const unsigned
char *in, unsigned int inl) \
{\
BLOCK_CIPHER_ecb_loop() \
cprefix##_ecb_encrypt(in + i, out + i, ctx-c.##kname, ctx-encrypt);\
return 1;\
}
^^
The construct c.##kname when run through the sco preprocessor results in 2
tokens c .whatever where the compiler needs 3 like c . whatever
I changed all the c.##kname constructs to c.kname and it compiles and
tests fine with the native compiler. I then compiled it with the gcc
compiler and it again did it without problems. I don't think the
c.##kname is necessary and will include a patch below to remove it. If you
find that it works for you, it will keep the current cvs from breaking the
native cc compiler for SCO Openserver. If you want to leave what you have
alone, I would be happy to submit a small change to the Configure script
and the evp_locl.h file to add a flag -DSCO and include the alternate code
if defined.
Thanks for all your work on such an excellent project.
patchfile below.
*** evp_locl.h Sun Jun 4 20:29:08 2000
--- evp_locl.h.new Sun Jun 4 20:29:41 2000
***
*** 70,97
static int cname##_ecb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out, const
unsigned char *in, unsigned int inl) \
{\
BLOCK_CIPHER_ecb_loop() \
! cprefix##_ecb_encrypt(in + i, out + i, ctx-c.##kname, ctx-encrypt);\
return 1;\
}
#define BLOCK_CIPHER_func_ofb(cname, cprefix, kname) \
static int cname##_ofb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out, const
unsigned char *in, unsigned int inl) \
{\
! cprefix##_ofb64_encrypt(in, out, (long)inl, ctx-c.##kname, ctx-iv,
ctx-num);\
return 1;\
}
#define BLOCK_CIPHER_func_cbc(cname, cprefix, kname) \
static int cname##_cbc_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out, const
unsigned char *in, unsigned int inl) \
{\
! cprefix##_cbc_encrypt(in, out, (long)inl, ctx-c.##kname, ctx-iv,
ctx-encrypt);\
return 1;\
}
#define BLOCK_CIPHER_func_cfb(cname, cprefix, kname) \
static int cname##_cfb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out, const
unsigned char *in, unsigned int inl) \
{\
! cprefix##_cfb64_encrypt(in, out, (long)inl, ctx-c.##kname, ctx-iv,
ctx-num, ctx-encrypt);\
return 1;\
}
--- 70,97
static int cname##_ecb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out, const
unsigned char *in, unsigned int inl) \
{\
BLOCK_CIPHER_ecb_loop() \
! cprefix##_ecb_encrypt(in + i, out + i, ctx-c.kname, ctx-encrypt);\
return 1;\
}
#define BLOCK_CIPHER_func_ofb(cname, cprefix, kname) \
static int cname##_ofb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out, const
unsigned char *in, unsigned int inl) \
{\
! cprefix##_ofb64_encrypt(in, out, (long)inl, ctx-c.kname, ctx-iv,
ctx-num);\
return 1;\
}
#define BLOCK_CIPHER_func_cbc(cname, cprefix, kname) \
static int cname##_cbc_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out, const
unsigned char *in, unsigned int inl) \
{\
! cprefix##_cbc_encrypt(in, out, (long)inl, ctx-c.kname, ctx-iv,
ctx-encrypt);\
return 1;\
}
#define BLOCK_CIPHER_func_cfb(cname, cprefix, kname) \
static int cname##_cfb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out, const
unsigned char *in, unsigned int inl) \
{\
! cprefix##_cfb64_encrypt(in, out, (long)inl, ctx-c.kname, ctx-iv, ctx-num,
ctx-encrypt);\
return 1;\
}
***
*** 111,117
cname##_cbc_cipher,\
cleanup,\
sizeof(EVP_CIPHER_CTX)-sizeofEVP_CIPHER_CTX *)NULL)-c))+\
! sizeofEVP_CIPHER_CTX *)NULL)-c.##kstruct)),\
set_asn1, get_asn1,\
ctrl, \
NULL \
--- 111,117
cname##_cbc_cipher,\
cleanup,\
sizeof(EVP_CIPHER_CTX)-sizeofEVP_CIPHER_CTX *)NULL)-c))+\
! sizeofEVP_CIPHER_CTX *)NULL)-c.kstruct)),\
set_asn1, get_asn1,\
ctrl, \
NULL \
***
*** 124,130
cname##_cfb_cipher,\
cleanup,\
sizeof(EVP_CIPHER_CTX)-sizeofEVP_CIPHER_CTX *)NULL)-c))+\
! sizeofEVP_CIPHER_CTX *)NULL)-c.##kstruct)),\
set_asn1, get_asn1,\
ctrl,\
NULL \
--- 124,130
cname##_cfb_cipher,\
cleanup,\
sizeof(EVP_CIPHER_CTX)-sizeofEVP_CIPHER_CTX *)NULL)-c))+\
!
Problem with cvs 6/4/00 and SCO
I updated the openssl with the current cvs today and tried to compile it with the native SCO Openserver 5.0.5 cc. The previous version (a few days ago) compiled fine. Today when I try and compile, I get the following: I configured with sco5-cc "e_des.c", line 106: error: invalid token: .des_ks "e_des.c", line 106: error: invalid token: .des_ks "e_des.c", line 106: error: invalid token: .des_ks "e_des.c", line 106: error: invalid token: .des_ks make[2]: *** [e_des.o] Error 1 make[1]: *** [subdirs] Error 1 make: *** [all] Error 1 I compared the older version of e_des.c with today's and they are identical so that is not the problem. It must be an included defination somewhere. if I reconfigure with sco5-gcc, it compiles OK. -- Phillip P. Porch [EMAIL PROTECTED] NIC:PP1573 finger for http://www.theporch.com UTM - 16 514546E 3994565N PGP key __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
No Subject
OpenSSL self-test report: OpenSSL version: 0.9.5b-dev Last change: Fix for SSL server purpose checking. Server checking wa... OS (uname): SCO_SV sco 3.2 5.0.5 i386 OS (config): whatever-whatever-sco5 Target (default): sco5-gcc Target: sco5-cc Compiler: Usage: cc [ options ] files ... Failure! - make[1]: Entering directory `/software/openssl' making all in crypto... make[2]: Entering directory `/software/openssl/crypto' making all in crypto/md2... make[3]: Entering directory `/software/openssl/crypto/md2' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/software/openssl/crypto/md2' making all in crypto/md5... make[3]: Entering directory `/software/openssl/crypto/md5' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/software/openssl/crypto/md5' making all in crypto/sha... make[3]: Entering directory `/software/openssl/crypto/sha' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/software/openssl/crypto/sha' making all in crypto/mdc2... make[3]: Entering directory `/software/openssl/crypto/mdc2' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/software/openssl/crypto/mdc2' making all in crypto/hmac... make[3]: Entering directory `/software/openssl/crypto/hmac' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/software/openssl/crypto/hmac' making all in crypto/ripemd... make[3]: Entering directory `/software/openssl/crypto/ripemd' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/software/openssl/crypto/ripemd' making all in crypto/des... make[3]: Entering directory `/software/openssl/crypto/des' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/software/openssl/crypto/des' making all in crypto/rc2... make[3]: Entering directory `/software/openssl/crypto/rc2' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/software/openssl/crypto/rc2' making all in crypto/rc4... make[3]: Entering directory `/software/openssl/crypto/rc4' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/software/openssl/crypto/rc4' making all in crypto/rc5... make[3]: Entering directory `/software/openssl/crypto/rc5' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/software/openssl/crypto/rc5' making all in crypto/idea... make[3]: Entering directory `/software/openssl/crypto/idea' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/software/openssl/crypto/idea' making all in crypto/bf... make[3]: Entering directory `/software/openssl/crypto/bf' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/software/openssl/crypto/bf' making all in crypto/cast... make[3]: Entering directory `/software/openssl/crypto/cast' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/software/openssl/crypto/cast' making all in crypto/bn... make[3]: Entering directory `/software/openssl/crypto/bn' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/software/openssl/crypto/bn' making all in crypto/rsa... make[3]: Entering directory `/software/openssl/crypto/rsa' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/software/openssl/crypto/rsa' making all in crypto/dsa... make[3]: Entering directory `/software/openssl/crypto/dsa' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/software/openssl/crypto/dsa' making all in crypto/dh... make[3]: Entering directory `/software/openssl/crypto/dh' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/software/openssl/crypto/dh' making all in crypto/dso... make[3]: Entering directory `/software/openssl/crypto/dso' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/software/openssl/crypto/dso' making all in crypto/buffer... make[3]: Entering directory `/software/openssl/crypto/buffer' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/software/openssl/crypto/buffer' making all in crypto/bio... make[3]: Entering directory `/software/openssl/crypto/bio' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/software/openssl/crypto/bio' making all in crypto/stack... make[3]: Entering directory `/software/openssl/crypto/stack' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/software/openssl/crypto/stack' making all in crypto/lhash... make[3]: Entering directory `/software/openssl/crypto/lhash' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/software/openssl/crypto/lhash' making all in crypto/rand... make[3]: Entering directory `/software/openssl/crypto/rand' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/software/openssl/crypto/rand' making all in crypto/err... make[3]: Entering directory `/software/openssl/crypto/err' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/software/openssl/crypto/err' making
SCO Openserver 5.0.5 problem
I have the 0.7 version of egd.pl installed and running with
egd.pl /dev/entropy
The self tests work fine.
I set the RANDFILE to the /dev/entropy after compiling openssl (CVS
version as of 5/7/00.)
I have no problems with:
openssl req -new -x509 -keyout private/cakey.pem -out cacert.pem -days 365
-config openssl.cnf
I have no problems with:
openssl req -nodes -new -x509 -keyout newreq.pem -out newreq.pem -days 360
-config openssl.cnf
The problem arises when I try and sign the certificate generated above
with:
openssl x509 -x509toreq -in newreq.pem -signkey newereq.pem -out tmp.pem
The program just sits and never returns. I did a little debugging with
scotruss which showed the program opening /dev/entropy and sleeping.
open("/dev/entropy", 0x0, 0x1b6) = ... (sleeping)
I then created a .rnd file by: ls -l | md5 .rnd
and set RANDFILE to be the .rnd file and the signing of the key works
fine.
So in summary, there appears to be a problem with the x509 -signkey
routine when the randomfile is the egd pipe.
Any suggestions on helping track this down further?
--
Phillip P. Porch [EMAIL PROTECTED] NIC:PP1573 finger for
http://www.theporch.com UTM - 16 514548E 3994397N PGP key
__
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
