I have now built the snapshot from 20050105 for mingw. The 0.9.7 stable
code builds and tests fine, with or without FIPS. The 0.9.8 code,
however, fails the test suite at the end of test_ssl. The same error
occurs when built with or without the assembler code. I am not sure
where to go with this. If anyone has suggestions as to what to check
next, I would appreciate it. The error reported is:
4294254169:error:1407E086:SSL routines:SSL2_SET_CERTIFICATE:certificate verify
failed:s2_clnt.c:1063:
I am attaching the log of test_ssl in case it gives some clues. All the
other tests from "make test" seem to pass OK. The check of the
certificates did, however, give different results than I got with the
DJGPP port. All the certificates were OK in the DJGPP port, but several
in the mingw port had the error:
error 18 at 0 depth lookup:self signed certificate
Here is an excerpt from the log:
> The following command should have some OK's and some failures
> There are definitly a few expired certificates
> if [ -n "" ]; then OSSL_LIBPATH="`cd ..; pwd`";
> LD_LIBRARY_PATH="$OSSL_LIBPATH:$LD_LIBRARY_PATH";
> DYLD_LIBRARY_PATH="$OSSL_LIBPATH:$DYLD_LIBRARY_PATH";
> SHLIB_PATH="$OSSL_LIBPATH:$SHLIB_PATH"; LIBPATH="$OSSL_LIBPATH:$LIBPATH"; if
> [ "mingw" = "Cygwin" ]; then PATH="${LIBPATH}:$PATH"; fi;
> LD_PRELOAD="$OSSL_LIBPATH/libssl.so $OSSL_LIBPATH/libcrypto.so"; export
> LD_LIBRARY_PATH DYLD_LIBRARY_PATH SHLIB_PATH LIBPATH PATH; export LD_PRELOAD;
> fi; ../apps/openssl verify -CApath ../certs ../certs/*.pem
> ../certs/RegTP-5R.pem: /C=DE/O=Regulierungsbeh\xC8orde f\xC8ur
> Telekommunikation und Post/0.2.262.1.10.7.20=1/CN=5R-CA 1:PN
> error 18 at 0 depth lookup:self signed certificate
One of the mingw binaries I tested identifies itself as:
OpenSSL 0.9.8-dev XX xxx XXXX
built on: Sun Jan 9 23:24:56 PST 2005
platform: mingw
options: bn(64,32) md2(int) rc4(idx,int) des(ptr,risc1,16,long) blowfish(idx)
compiler: gcc -DDSO_WIN32 -mno-cygwin -DL_ENDIAN -fomit-frame-pointer -O3
-march=i486 -Wall
OPENSSLDIR: "d:/cygwin/mingw/ssl"
Doug
--
Doug Kaufman
Internet: [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List openssl-dev@openssl.org
Automated List Manager [EMAIL PROTECTED]
