Re: [Ocf-linux-users] openssl 1.0.1g Signature verification problem using OCF

[anand r. <one...@ya...>]

Hi David,

Did you get a chance to reproduce the setup and issue.
I have made no progress on this as I am unable to find the reason.

BRs,
Anand


On Tuesday, July 29, 2014 3:44 AM, David McCullough <uc...@gm...> wrote:
 



anand rao wrote the following:
> 
> 
> Hi David,
> 
> I have few more information which I missed earlier.
> In my OpenSSL configuration along with HAVE_CRYPTODEV I have also enabled USE_CRYPTODEV_DIGESTS.
> 
> If I don't enable USE_CRYPTODEV_DIGESTS option then I am observing below error.

That is interesting as I never use USE_CRYPTODEV_DIGESTS, thanks for the
update.

Cheers,
Davidm

> root@OpenWrt:/etc/ssl# openssl req -x509 -engine cryptodev -new -newkey rsa:1024
>  -keyout private/cakey.pem -days 3650 -out cacert.pem
> engine "cryptodev" set.
> Generating a 1024 bit RSA private key
> ..++++++
> ................................................++++++
> writing new private key to 'private/cakey.pem'
> Enter PEM pass phrase:
> Verifying - Enter PEM pass phrase:
> -----
> You are about to be asked to enter information that will be incorporated
> into your certificate request.
> What you are about to enter is what is called a Distinguished Name or a DN.
> There are quite a few fields but you can leave some blank
> For some fields there will be a default value,
> If you enter '.', the field will be left blank.
> -----
> Country Name (2 letter code) [AU]:problems making Certificate Request
> 
> 
> BRs,
> Anand
> 
> 
> 
> 
> 
> On Friday, July 25, 2014 6:54 PM, David McCullough <uc...@gm...> wrote:
>  
> 
> anand rao wrote the following:
> > Hi David,
> > >>You should not need to patch any of the 1.0.0 or later versions for use
> > 
> > >>with OCF.  All the "main" changes should already be in there.
> > 
> > >>Are you appling any patches to 1.0.1g ?'
> > 
> > No. I have not applied any patches to 1.0.1g.
> > As I mentioned without applying any patches this issue is reproducible.
> 
> No problems,  just making sure I can reproduce you setup :-)
> 
> -- 
> David McCullough,  uc...@gm...,   Ph: 0410 560 763

-- 
David McCullough,  da...@sp...,   Ph: 0410 560 763