[Ocf-linux-users] Error thrown by OpenSSL when /dev/crypto exists

[Turner, G. <gre...@ti...>]

All,
I am using OCF and OpenSSL to access crypto hardware on the AM37x processor.  OCF 20100325 is used with a 2.6.32 kernel from TI for the AM37x.  OpenSSL 1.0.0d is built with CFLAG's -DHAVE_CRYPTODEV and -DUSE_CRYPTODEV_DIGESTS.

The following errors are being thrown by OpenSSL when generating a self-signed certificate:

root@am37x-evm:~# openssl req -new -x509 -key privkey.pem -out cacert.pem -days 1095
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:US
State or Province Name (full name) [Some-State]:TX
Locality Name (eg, city) []:
Organization Name (eg, company) [Internet Widgits Pty Ltd]:TI
Organizational Unit Name (eg, section) []:
Common Name (eg, YOUR name) []:
Email Address []:
1073868400:error:0606B06E:digital envelope routines:EVP_SignFinal:wrong public key type:p_sign.c:125:
1073868400:error:0D0C3006:asn1 encoding routines:ASN1_item_sign:EVP lib:a_sign.c:279:
root@am37x-evm:~#
root@am37x-evm:~#

If I remove /dev/crypto, the error does not occur.  Has anyone else seen this issue?  Is this a known issue that is maybe fixed in the newer OCF version?

Thanks in advance.



Regards,

Greg Turner

Texas Instruments

(214) 480-1001