Hi,

I am busy porting OpenSSL to the Eracom hardware engine and have run into
a problem when entering PINS (ie using fgets() without echo). Thought I'd
share the workaround and invite comment ...

Normally, openssl does not need to access this function so I imagine it
has not been much debugged. But with this hardware engine I need to be
able to input a PIN without echo and since there is a mechanism in openssl
to do just that, naturally I prefer to use it rather than write more code.

Normally, Linux is configured with -DTERMIO set. This causes fgets() to
return an error (it returns NULL and feof() is set) when NOECHO is used in
crypto/ui/ui_openssl:read_string_inner()

If I compile with -DTERMIOS instead, there is no error. So my question is
in 3 parts:

1. what is the 'correct' way to specify TERMIOS instead of TERMIO? I have
tried setting the TERMIOS parameter in util/pl/linux.pl to no avail. I am
currently changing all the  linux configurations in the 'Configure' script
and this seems to work, but it's messy.

2. Since this fixes the problem, can this setting please be used as the
default in future?

3. Why use TERMIO when TERMIOS is available on Linux?

For completeness, I am using the following:

openssl-0.9.7b
mod_ssl-2.8.14-1.3.27
apache-1.3.27
RedHat 9

... and yes, the current stat of the port is available as a source code
patch at http://www.eracom-tech.com/downloads/downloads.php

Thanks

Bob


-- 
Bob Hepple, Research & Development Group
Eracom Technologies Australia Pty. Ltd.
28 Greg Chappell Drive, Burleigh Heads, Qld. 4220, Australia
Tel.: +61 7 5593 4911               Fax.: +61 7 5593 4388
Email: [EMAIL PROTECTED]
Web: www.eracom-tech.com

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to