Solaris(10) provides NSS support but it is somewhat outdated. Especially it does not know about SEC_OID_SHA224, so compilation (linking) fails.

So currently APR trunk and APR-UTIL 1.7.x no longer compile on Solaris (1.7.x has more problems outside of crypto).

We might need to detect SEC_OID_SHA224 during configure and find a way to cope with its nonexistence in the code.

I tried compilation with the dirty workaroung:

--- crypto/apr_crypto_nss.c     2019-08-04 12:00:19.841885000 +0000
+++ crypto/apr_crypto_nss.c     2019-08-07 00:28:16.516409000 +0000
@@ -736,7 +736,8 @@
             key->hashAlg = SEC_OID_SHA1;
             break;
         case APR_CRYPTO_DIGEST_SHA224:
-            key->hashAlg = SEC_OID_SHA224;
+            return APR_ENODIGEST;
+            //key->hashAlg = SEC_OID_SHA224;
             break;
         case APR_CRYPTO_DIGEST_SHA256:
             key->hashAlg = SEC_OID_SHA256;

and that compiles on Solaris 10 Sparc. And "make check" is fine, except of course in testcrypto the specific tests for DIGEST SHA224 nss.

Regards,

Rainer

Reply via email to