This was a clean full install of Mandrake 7.2 i586 in "expert" paranoid security mode. My fault? -dave >>>>>>>>>>>>>>>> [root@navajo openssl-0.9.6]# more testlog OpenSSL self-test report: OpenSSL version: 0.9.6 Last change: In ssl23_get_client_hello, generate an error message wh... OS (uname): Linux navajo.arb.net 2.2.17-21mdksecure #1 SMP Thu Oct 5 12:52:38 CEST 2000 i586 unknown OS (config): i586-whatever-linux2 Target (default): ?? Target: linux-elf Compiler: gcc version 2.95.3 19991030 (prerelease) Failure! ----------------------------------------------------------------------------- make[1]: Entering directory `/etc/ssl/openssl-0.9.6' making all in crypto... make[2]: Entering directory `/etc/ssl/openssl-0.9.6/crypto' making all in crypto/md2... make[3]: Entering directory `/etc/ssl/openssl-0.9.6/crypto/md2' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/etc/ssl/openssl-0.9.6/crypto/md2' making all in crypto/md4... make[3]: Entering directory `/etc/ssl/openssl-0.9.6/crypto/md4' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/etc/ssl/openssl-0.9.6/crypto/md4' making all in crypto/md5... make[3]: Entering directory `/etc/ssl/openssl-0.9.6/crypto/md5' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/etc/ssl/openssl-0.9.6/crypto/md5' making all in crypto/sha... make[3]: Entering directory `/etc/ssl/openssl-0.9.6/crypto/sha' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/etc/ssl/openssl-0.9.6/crypto/sha' making all in crypto/mdc2... make[3]: Entering directory `/etc/ssl/openssl-0.9.6/crypto/mdc2' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/etc/ssl/openssl-0.9.6/crypto/mdc2' making all in crypto/hmac... make[3]: Entering directory `/etc/ssl/openssl-0.9.6/crypto/hmac' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/etc/ssl/openssl-0.9.6/crypto/hmac' making all in crypto/ripemd... make[3]: Entering directory `/etc/ssl/openssl-0.9.6/crypto/ripemd' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/etc/ssl/openssl-0.9.6/crypto/ripemd' making all in crypto/des... make[3]: Entering directory `/etc/ssl/openssl-0.9.6/crypto/des' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/etc/ssl/openssl-0.9.6/crypto/des' making all in crypto/rc2... make[3]: Entering directory `/etc/ssl/openssl-0.9.6/crypto/rc2' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/etc/ssl/openssl-0.9.6/crypto/rc2' making all in crypto/rc4... make[3]: Entering directory `/etc/ssl/openssl-0.9.6/crypto/rc4' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/etc/ssl/openssl-0.9.6/crypto/rc4' making all in crypto/rc5... make[3]: Entering directory `/etc/ssl/openssl-0.9.6/crypto/rc5' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/etc/ssl/openssl-0.9.6/crypto/rc5' making all in crypto/idea... make[3]: Entering directory `/etc/ssl/openssl-0.9.6/crypto/idea' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/etc/ssl/openssl-0.9.6/crypto/idea' making all in crypto/bf... make[3]: Entering directory `/etc/ssl/openssl-0.9.6/crypto/bf' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/etc/ssl/openssl-0.9.6/crypto/bf' making all in crypto/cast... make[3]: Entering directory `/etc/ssl/openssl-0.9.6/crypto/cast' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/etc/ssl/openssl-0.9.6/crypto/cast' making all in crypto/bn... make[3]: Entering directory `/etc/ssl/openssl-0.9.6/crypto/bn' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/etc/ssl/openssl-0.9.6/crypto/bn' making all in crypto/rsa... make[3]: Entering directory `/etc/ssl/openssl-0.9.6/crypto/rsa' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/etc/ssl/openssl-0.9.6/crypto/rsa' making all in crypto/dsa... make[3]: Entering directory `/etc/ssl/openssl-0.9.6/crypto/dsa' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/etc/ssl/openssl-0.9.6/crypto/dsa' making all in crypto/dh... make[3]: Entering directory `/etc/ssl/openssl-0.9.6/crypto/dh' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/etc/ssl/openssl-0.9.6/crypto/dh' making all in crypto/dso... make[3]: Entering directory `/etc/ssl/openssl-0.9.6/crypto/dso' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/etc/ssl/openssl-0.9.6/crypto/dso' making all in crypto/buffer... make[3]: Entering directory `/etc/ssl/openssl-0.9.6/crypto/buffer' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/etc/ssl/openssl-0.9.6/crypto/buffer' making all in crypto/bio... make[3]: Entering directory `/etc/ssl/openssl-0.9.6/crypto/bio' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/etc/ssl/openssl-0.9.6/crypto/bio' making all in crypto/stack... make[3]: Entering directory `/etc/ssl/openssl-0.9.6/crypto/stack' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/etc/ssl/openssl-0.9.6/crypto/stack' making all in crypto/lhash... make[3]: Entering directory `/etc/ssl/openssl-0.9.6/crypto/lhash' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/etc/ssl/openssl-0.9.6/crypto/lhash' making all in crypto/rand... make[3]: Entering directory `/etc/ssl/openssl-0.9.6/crypto/rand' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/etc/ssl/openssl-0.9.6/crypto/rand' making all in crypto/err... make[3]: Entering directory `/etc/ssl/openssl-0.9.6/crypto/err' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/etc/ssl/openssl-0.9.6/crypto/err' making all in crypto/objects... make[3]: Entering directory `/etc/ssl/openssl-0.9.6/crypto/objects' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/etc/ssl/openssl-0.9.6/crypto/objects' making all in crypto/evp... make[3]: Entering directory `/etc/ssl/openssl-0.9.6/crypto/evp' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/etc/ssl/openssl-0.9.6/crypto/evp' making all in crypto/asn1... make[3]: Entering directory `/etc/ssl/openssl-0.9.6/crypto/asn1' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/etc/ssl/openssl-0.9.6/crypto/asn1' making all in crypto/pem... make[3]: Entering directory `/etc/ssl/openssl-0.9.6/crypto/pem' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/etc/ssl/openssl-0.9.6/crypto/pem' making all in crypto/x509... make[3]: Entering directory `/etc/ssl/openssl-0.9.6/crypto/x509' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/etc/ssl/openssl-0.9.6/crypto/x509' making all in crypto/x509v3... make[3]: Entering directory `/etc/ssl/openssl-0.9.6/crypto/x509v3' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/etc/ssl/openssl-0.9.6/crypto/x509v3' making all in crypto/conf... make[3]: Entering directory `/etc/ssl/openssl-0.9.6/crypto/conf' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/etc/ssl/openssl-0.9.6/crypto/conf' making all in crypto/txt_db... make[3]: Entering directory `/etc/ssl/openssl-0.9.6/crypto/txt_db' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/etc/ssl/openssl-0.9.6/crypto/txt_db' making all in crypto/pkcs7... make[3]: Entering directory `/etc/ssl/openssl-0.9.6/crypto/pkcs7' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/etc/ssl/openssl-0.9.6/crypto/pkcs7' making all in crypto/pkcs12... make[3]: Entering directory `/etc/ssl/openssl-0.9.6/crypto/pkcs12' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/etc/ssl/openssl-0.9.6/crypto/pkcs12' making all in crypto/comp... make[3]: Entering directory `/etc/ssl/openssl-0.9.6/crypto/comp' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/etc/ssl/openssl-0.9.6/crypto/comp' make[2]: Leaving directory `/etc/ssl/openssl-0.9.6/crypto' making all in ssl... make[2]: Entering directory `/etc/ssl/openssl-0.9.6/ssl' make[2]: Nothing to be done for `all'. make[2]: Leaving directory `/etc/ssl/openssl-0.9.6/ssl' making all in rsaref... make[2]: Entering directory `/etc/ssl/openssl-0.9.6/rsaref' make[2]: Nothing to be done for `all'. make[2]: Leaving directory `/etc/ssl/openssl-0.9.6/rsaref' making all in apps... make[2]: Entering directory `/etc/ssl/openssl-0.9.6/apps' make[2]: Nothing to be done for `all'. make[2]: Leaving directory `/etc/ssl/openssl-0.9.6/apps' making all in test... make[2]: Entering directory `/etc/ssl/openssl-0.9.6/test' make[2]: Nothing to be done for `all'. make[2]: Leaving directory `/etc/ssl/openssl-0.9.6/test' making all in tools... make[2]: Entering directory `/etc/ssl/openssl-0.9.6/tools' make[2]: Nothing to be done for `all'. make[2]: Leaving directory `/etc/ssl/openssl-0.9.6/tools' make[1]: Leaving directory `/etc/ssl/openssl-0.9.6' ----------------------------------------------------------------------------- make[1]: Entering directory `/etc/ssl/openssl-0.9.6' testing... make[2]: Entering directory `/etc/ssl/openssl-0.9.6/test' make[3]: Entering directory `/etc/ssl/openssl-0.9.6/apps' make[3]: Nothing to be done for `all'. make[3]: Leaving directory `/etc/ssl/openssl-0.9.6/apps' ./destest Doing cbcm Doing ecb Doing ede ecb Doing cbc Doing desx cbc Doing ede cbc Doing pcbc Doing cfb8 cfb16 cfb32 cfb48 cfb64 cfb64() ede_cfb64() done Doing ofb Doing ofb64 Doing ede_ofb64 Doing cbc_cksum Doing quad_cksum input word alignment test 0 1 2 3 output word alignment test 0 1 2 3 fast crypt test ./ideatest ecb idea ok cbc idea ok cfb64 idea ok ./shatest test 1 ok test 2 ok test 3 ok ./sha1test test 1 ok test 2 ok test 3 ok ./md4test test 1 ok test 2 ok test 3 ok test 4 ok test 5 ok test 6 ok test 7 ok ./md5test test 1 ok test 2 ok test 3 ok test 4 ok test 5 ok test 6 ok test 7 ok ./hmactest test 0 ok test 1 ok test 2 ok test 3 ok ./md2test test 1 ok test 2 ok test 3 ok test 4 ok test 5 ok test 6 ok test 7 ok ./mdc2test pad1 - ok pad2 - ok ./rmdtest test 1 ok test 2 ok test 3 ok test 4 ok test 5 ok test 6 ok test 7 ok test 8 ok ./rc2test ecb RC2 ok ./rc4test test 0 ok test 1 ok test 2 ok test 3 ok test 4 ok test 5 ok test end processing ....................done test multi-call ....................done ./rc5test ecb RC5 ok cbc RC5 ok ./bftest testing blowfish in raw ecb mode testing blowfish in ecb mode testing blowfish set_key testing blowfish in cbc mode testing blowfish in cfb64 mode testing blowfish in ofb64 ./casttest ecb cast5 ok This test will take some time....123456789ABCDEF ok ./randtest test 1 done test 2 done test 3 done test 4 done starting big number library test, could take a while... test BN_add test BN_sub test BN_lshift1 test BN_lshift (fixed) test BN_lshift test BN_rshift1 test BN_rshift test BN_sqr test BN_mul test BN_div test BN_div_recp test BN_mod test BN_mod_mul test BN_mont test BN_mod_exp test BN_exp running bc verify BN_add..................................................................................................... verify BN_sub....................................................................................................................... ................................ verify BN_lshift1..................................................................................................... verify BN_lshift (fixed)..................................................................................................... verify BN_lshift..................................................................................................... verify BN_rshift1..................................................................................................... verify BN_rshift..................................................................................................... verify BN_sqr..................................................................................................... verify BN_mul....................................................................................................................... ................................ verify BN_div....................................................................................................................... .................................................................................................................................... .................................................. verify BN_div_recp.................................................................................................................. .................................................................................................................................... ....................................................... verify BN_mod..................................................................................................... verify BN_mod_mul..................................................................................................... verify BN_mont...... verify BN_mod_exp...... verify BN_exp...... 1831 tests passed test a^b%c implementations ./exptest .................................................................................................................................... .................................................................... done cat base64 base64 base64 base64 bf bf base64 bf-cbc bf-cbc base64 bf-cfb bf-cfb base64 bf-ecb bf-ecb base64 bf-ofb bf-ofb base64 cast cast base64 cast-cbc cast-cbc base64 cast5-cbc cast5-cbc base64 cast5-cfb cast5-cfb base64 cast5-ecb cast5-ecb base64 cast5-ofb cast5-ofb base64 des des base64 des-cbc des-cbc base64 des-cfb des-cfb base64 des-ecb des-ecb base64 des-ede des-ede base64 des-ede-cbc des-ede-cbc base64 des-ede-cfb des-ede-cfb base64 des-ede-ofb des-ede-ofb base64 des-ede3 des-ede3 base64 des-ede3-cbc des-ede3-cbc base64 des-ede3-cfb des-ede3-cfb base64 des-ede3-ofb des-ede3-ofb base64 des-ofb des-ofb base64 des3 des3 base64 desx desx base64 idea idea base64 idea-cbc idea-cbc base64 idea-cfb idea-cfb base64 idea-ecb idea-ecb base64 idea-ofb idea-ofb base64 rc2 rc2 base64 rc2-40-cbc rc2-40-cbc base64 rc2-64-cbc rc2-64-cbc base64 rc2-cbc rc2-cbc base64 rc2-cfb rc2-cfb base64 rc2-ecb rc2-ecb base64 rc2-ofb rc2-ofb base64 rc4 rc4 base64 rc4-40 rc4-40 base64 rc5 rc5 base64 rc5-cbc rc5-cbc base64 rc5-cfb rc5-cfb base64 rc5-ecb rc5-ecb base64 rc5-ofb rc5-ofb base64 echo test normal x509v1 certificate test normal x509v1 certificate sh ./tx509 2>/dev/null testing X509 conversions p -> d p -> n p -> p d -> d n -> d p -> d d -> n n -> n p -> n d -> p n -> p p -> p echo test first x509v3 certificate test first x509v3 certificate sh ./tx509 v3-cert1.pem 2>/dev/null testing X509 conversions p -> d p -> n p -> p d -> d n -> d p -> d d -> n n -> n p -> n d -> p n -> p p -> p echo test second x509v3 certificate test second x509v3 certificate sh ./tx509 v3-cert2.pem 2>/dev/null testing X509 conversions p -> d p -> n p -> p d -> d n -> d p -> d d -> n n -> n p -> n d -> p n -> p p -> p rsa testing rsa conversions p -> d p -> p d -> d p -> d d -> p p -> p ./rsa_test PKCS #1 v1.5 encryption/decryption ok OAEP encryption/decryption ok PKCS #1 v1.5 encryption/decryption ok OAEP encryption/decryption ok PKCS #1 v1.5 encryption/decryption ok OAEP encryption/decryption ok testing crl conversions p -> d p -> p d -> d p -> d d -> p p -> p testing session-id conversions p -> d p -> p d -> d p -> d d -> p p -> p Generate and verify a certificate request generating certificate request rsa There should be a 2 sequences of .'s and some +'s. There should not be more that at most 80 per line This could take some time. Using configuration from test.cnf Generating a 512 bit RSA private key ..............++++++++++++ .++++++++++++ writing new private key to 'testkey.pem' ----- You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter '.', the field will be left blank. ----- Country Name (2 letter code) [AU]:AU State or Province Name (full name) [Queensland]: Locality Name (eg, city) []:Brisbane Organization Name (eg, company) []:CryptSoft Pty Ltd Organizational Unit Name (eg, section) []:. Common Name (eg, YOUR name) []:Eric Young Email Address []:[EMAIL PROTECTED] Using configuration from test.cnf verify OK testing req conversions p -> d p -> p d -> d p -> d d -> p p -> p testing req conversions p -> d p -> p d -> d p -> d d -> p p -> p testing pkcs7 conversions p -> d p -> p d -> d p -> d d -> p p -> p testing pkcs7 conversions (2) p -> d p -> p d -> d p -> d d -> p p -> p The following command should have some OK's and some failures There are definitly a few expired certificates ../apps/openssl verify -CApath ../certs ../certs/*.pem Detected an attempt to write across stack boundary. Terminating /etc/ssl/openssl-0.9.6/apps/openssl. "libsafe violation for /etc/ssl/openssl-0.9.6/apps/openssl, pid=18373; overflow caused by memcpy()" Null message body; hope that's ok make[2]: *** [test_verify] Error 1 make[2]: Leaving directory `/etc/ssl/openssl-0.9.6/test' make[1]: *** [tests] Error 2 make[1]: Leaving directory `/etc/ssl/openssl-0.9.6' ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
