Re: [Ocf-linux-users] openssl 1.0.1g Signature verification problem using OCF

[anand r. <one...@ya...>]

Hi David,

I have few more information which I missed earlier.
In my OpenSSL configuration along with HAVE_CRYPTODEV I have also enabled USE_CRYPTODEV_DIGESTS.

If I don't enable USE_CRYPTODEV_DIGESTS option then I am observing below error.

root@OpenWrt:/etc/ssl# openssl req -x509 -engine cryptodev -new -newkey rsa:1024
 -keyout private/cakey.pem -days 3650 -out cacert.pem
engine "cryptodev" set.
Generating a 1024 bit RSA private key
..++++++
................................................++++++
writing new private key to 'private/cakey.pem'
Enter PEM pass phrase:
Verifying - Enter PEM pass phrase:
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:problems making Certificate Request


BRs,
Anand





On Friday, July 25, 2014 6:54 PM, David McCullough <uc...@gm...> wrote:
 

anand rao wrote the following:
> Hi David,
> >>You should not need to patch any of the 1.0.0 or later versions for use
> 
> >>with OCF.  All the "main" changes should already be in there.
> 
> >>Are you appling any patches to 1.0.1g ?'
> 
> No. I have not applied any patches to 1.0.1g.
> As I mentioned without applying any patches this issue is reproducible.

No problems,  just making sure I can reproduce you setup :-)

-- 
David McCullough,  uc...@gm...,   Ph: 0410 560 763