Coming back to this 6 months later: the situation is still the same.
Futhermore the same commit broke compat with OpenSSL 0.9.8 without
documenting the increased version requirements.
It would be good to fix this.
Regards,
Rainer
Am 07.08.2019 um 00:55 schrieb Rainer Jung:
Solaris(10) provides NSS support but it is somewhat outdated. Especially
it does not know about SEC_OID_SHA224, so compilation (linking) fails.
So currently APR trunk and APR-UTIL 1.7.x no longer compile on Solaris
(1.7.x has more problems outside of crypto).
We might need to detect SEC_OID_SHA224 during configure and find a way
to cope with its nonexistence in the code.
I tried compilation with the dirty workaroung:
--- crypto/apr_crypto_nss.c 2019-08-04 12:00:19.841885000 +0000
+++ crypto/apr_crypto_nss.c 2019-08-07 00:28:16.516409000 +0000
@@ -736,7 +736,8 @@
key->hashAlg = SEC_OID_SHA1;
break;
case APR_CRYPTO_DIGEST_SHA224:
- key->hashAlg = SEC_OID_SHA224;
+ return APR_ENODIGEST;
+ //key->hashAlg = SEC_OID_SHA224;
break;
case APR_CRYPTO_DIGEST_SHA256:
key->hashAlg = SEC_OID_SHA256;
and that compiles on Solaris 10 Sparc. And "make check" is fine, except
of course in testcrypto the specific tests for DIGEST SHA224 nss.
Regards,
Rainer
