Hello,
in openssl 0.9.3a the option handling in gendsa.c is incorrect. The
options -des, -3des and -idea are always rejected because the code to
check them was inserted a bit too late (after line 114).
I suggest to insert this code part after line 108. My solution looks like
this:
96 for (;;)
97 {
98 if (argc <= 0) break;
99 if (strcmp(*argv,"-out") == 0)
100 {
101 if (--argc < 1) goto bad;
102 outfile= *(++argv);
103 }
104 else if (strcmp(*argv,"-rand") == 0)
105 {
106 if (--argc < 1) goto bad;
107 inrand= *(++argv);
108 }
109 #ifndef NO_DES
110 else if (strcmp(*argv,"-des") == 0)
111 enc=EVP_des_cbc();
112 else if (strcmp(*argv,"-des3") == 0)
113 enc=EVP_des_ede3_cbc();
114 #endif
115 #ifndef NO_IDEA
116 else if (strcmp(*argv,"-idea") == 0)
117 enc=EVP_idea_cbc();
118 #endif
119 else if (strcmp(*argv,"-") == 0)
120 goto bad;
121 else if (dsaparams == NULL)
122 {
123 dsaparams= *argv;
124 }
125 else
126 goto bad;
127 argv++;
128 argc--;
129 }
Cheers,
Holger
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]