In apps/ca.c when using a DSA key it computes an MD5 digest then overwrites
the result with a DSS digest. This patch gets rid of the needless MD5 hash.
*** apps/ca.c.orig Sun Jan 3 16:00:41 1999
--- apps/ca.c Wed Jan 6 09:36:12 1999
***************
*** 1024,1032 ****
}
else
! dgst=EVP_md5();
#ifndef NO_DSA
if (pkey->type == EVP_PKEY_DSA)
dgst = EVP_dss1() ;
#endif
if (!X509_CRL_sign(crl,pkey,dgst)) goto err;
--- 1024,1035 ----
}
else
! {
#ifndef NO_DSA
if (pkey->type == EVP_PKEY_DSA)
dgst = EVP_dss1() ;
+ else
#endif
+ dgst=EVP_md5();
+ }
if (!X509_CRL_sign(crl,pkey,dgst)) goto err;
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
