Hello,
I was in for a surprise when I added some custom objects into objects.txt.
Since I wanted to use our private enterprises OIDs, I used the form:
enterprises 1527 1 : myobj : My Object
(same form as the dcObject already in there)
However, "enterprises" is undefined, so my object ended up at the root
(i.e. 1527.1 instead of 1.3.6.1.4.1.1527.1) without a warning.
I hacked a bit in objects.pl to catch this gotcha:
--- openssl-SNAP-20020402/crypto/objects/objects.pl Mon Dec 3 15:01:26 2001
+++ openssl-SNAP-20020402-sss/crypto/objects/objects.pl Thu Apr 4 11:12:46 2002
@@ -210,6 +210,8 @@
if (!($a[0] =~ /^[0-9]+$/))
{
$a[0] =~ s/-/_/g;
+ if (!defined($obj{$a[0]}))
+ { die "$ARGV[0]:$o:Undefined identifier ",$a[0],"\n"; }
$pref_oid = "OBJ_" . $a[0];
$pref_sep = ",";
shift @a;
=============
As it turns out, both "private" and "enterprises" are undefined, so objects.txt needs
to be fixed to make it compile at all. This patch seemed least intrusive:
-- openssl-SNAP-20020402/crypto/objects/objects.txt Tue Mar 26 19:01:01 2002
+++ openssl-SNAP-20020402-sss/crypto/objects/objects.txt Thu Apr 4 10:15:27
+2002
@@ -699,10 +699,10 @@
internet 6 : snmpv2 : SNMPv2
internet 7 : mail : Mail
-private 1 : enterprises : Enterprises
+Private 1 : enterprises : Enterprises
# RFC 2247
-enterprises 1466 344 : dcobject : dcObject
+Enterprises 1466 344 : dcobject : dcObject
# What the hell are these OIDs, really?
!Cname rle-compression
=============
So now dcObject ends up having the (presumably) intended OID 1.3.6.1.4.1.1466.344 .
I'm also a bit suspicious about the OIDs of "secp192r1" and "secp256r1".
In obj_dat.h they both end up having OID 0. Their corresponding OBJ_ macros
in obj_mac.h get mapped to OBJ_X9_62_prime{192,256}v1 (of which I suppose
they are aliases), though, so it may be OK.
I'm not into all the gory details of this magic - it just looked a bit odd to me...
Regards,
Svenning
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
