Re: [Ocf-linux-users] openssl 1.0.1g Signature verification problem using OCF

[David M. <uc...@gm...>]

anand rao wrote the following:
> Hi David,
> 
> Did you get a chance to reproduce the setup and issue.
> I have made no progress on this as I am unable to find the reason.

Sorry,  not yet :-(

Keep bugging me and I promise to get to it :-)

Cheers,
Davidm

> On Tuesday, July 29, 2014 3:44 AM, David McCullough <uc...@gm...> wrote:
> 
> anand rao wrote the following:
> > 
> > 
> > Hi David,
> > 
> > I have few more information which I missed earlier.
> > In my OpenSSL configuration along with HAVE_CRYPTODEV I have also enabled USE_CRYPTODEV_DIGESTS.
> > 
> > If I don't enable USE_CRYPTODEV_DIGESTS option then I am observing below error.
> 
> That is interesting as I never use USE_CRYPTODEV_DIGESTS, thanks for the
> update.
> 
> Cheers,
> Davidm
> 
> > root@OpenWrt:/etc/ssl# openssl req -x509 -engine cryptodev -new -newkey rsa:1024
> >  -keyout private/cakey.pem -days 3650 -out cacert.pem
> > engine "cryptodev" set.
> > Generating a 1024 bit RSA private key
> > ..++++++
> > ................................................++++++
> > writing new private key to 'private/cakey.pem'
> > Enter PEM pass phrase:
> > Verifying - Enter PEM pass phrase:
> > -----
> > You are about to be asked to enter information that will be incorporated
> > into your certificate request.
> > What you are about to enter is what is called a Distinguished Name or a DN.
> > There are quite a few fields but you can leave some blank
> > For some fields there will be a default value,
> > If you enter '.', the field will be left blank.
> > -----
> > Country Name (2 letter code) [AU]:problems making Certificate Request
> > 
> > 
> > BRs,
> > Anand
> > 
> > 
> > 
> > 
> > 
> > On Friday, July 25, 2014 6:54 PM, David McCullough <uc...@gm...> wrote:
> >  
> > 
> > anand rao wrote the following:
> > > Hi David,
> > > >>You should not need to patch any of the 1.0.0 or later versions for use
> > > 
> > > >>with OCF.  All the "main" changes should already be in there.
> > > 
> > > >>Are you appling any patches to 1.0.1g ?'
> > > 
> > > No. I have not applied any patches to 1.0.1g.
> > > As I mentioned without applying any patches this issue is reproducible.
> > 
> > No problems,  just making sure I can reproduce you setup :-)
> > 
> > -- 
> > David McCullough,  uc...@gm...,   Ph: 0410 560 763
> 
> -- 
> David McCullough,  da...@sp...,   Ph: 0410 560 763

-- 
David McCullough,  da...@sp...,   Ph: 0410 560 763