(Hi Igor)
This is almost certainly a problem due to building openssl-0.9.2b
with RSAref. The problem is that OAEP is a new RSA "encryption
scheme" defined in RFC2347 dated October 1998. RSAref 2.0
appears to date back to 1994.
My fond hope here is that the "make test" failure is a
minor oversight (forgetting to skip invocation of
rsa_oaep_test when -DRSAref is used.) I just commented
out the invocation of it in test/Makefile.ssl and got
through the rest of "make test" (and "apps/openssl speed")
without problems.
Hope to try out mod-ssl-2.2.6-1.3.6 + openssl-0.9.2b
+ rsaref-2.0 on a production server tomorrow morning to
see if my fond hope is wrong.
Two background URLs:
http://www.progressive-comp.com/Lists/?l=openssl-dev&m=92211886324200&w=2
http://www.cis.ohio-state.edu/htbin/rfc/rfc2437.html
Ed
--------------------------
Ed Kubaitis - [EMAIL PROTECTED]
CCSO - University of Illinois at Urbana-Champaign
"Ralf S. Engelschall" wrote:
>
> On Wed, Mar 24, 1999, Igor S. Livshits wrote:
>
> > I am attempting to upgrade to mod-ssl-2.2.6-1.3.6 and am having
> > problems building openssl-0.9.2b. Configuration and compilation seems
> > to go fine, but when I run the tests, I get this failure:
> >
> > ./rsa_oaep_test
> > Decryption failed!
> > Decryption failed!
> > Decryption failed!
> > make[1]: *** [test_rsa] Error 1
> >
> > I am trying this on a RedHat 5.2 system with the following flags:
> >
> > perl Configure linux-elf -DRSAref -lRSAglue
> > -L`pwd`/../rsaref-2.0/local/ -lrsaref
> >
> > I'd appreciate any hints...
>
> The RSA OEAP stuff is brand new. Nevertheless I guess the actual source of
> your problem is the RSAref library. Compile without it and try again. I'm 95%
> sure then it will work. If not, you can try to contact Ulf Moeller
> <[EMAIL PROTECTED]> which wrote this stuff. Perhaps he has a clue why it could fail
> for you...
> Ralf S. Engelschall
> [EMAIL PROTECTED]
> www.engelschall.com
> ...
--------------------------
Ed Kubaitis - [EMAIL PROTECTED]
CCSO - University of Illinois at Urbana-Champaign
______________________________________________________________________
Apache Interface to SSLeay (mod_ssl) www.engelschall.com/sw/mod_ssl/
Official Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
