OK, I've gone through and tested the script... it works for me, I hope it works for you.
Cheers, Richard In message <20100125.112009.189705375.rich...@levitte.org> on Mon, 25 Jan 2010 11:20:09 +0100 (CET), Richard Levitte <rich...@levitte.org> said: richard> I just had a look at testtsa.com, and yeah, the corresponding shell richard> script has evolved since testtsa.com was last updated. Working on it richard> right now. richard> richard> Cheers, richard> Richard richard> richard> In message <10012423165954_20205...@antinode.info> on Sun, 24 Jan 2010 23:16:59 -0600 (CST), "Steven M. Schweda" <s...@antinode.info> said: richard> richard> sms> From: Richard Levitte <rich...@levitte.org> richard> sms> richard> sms> > Might be a fault in test/testtsa.com... I'll see if I can find richard> sms> > something there... richard> sms> richard> sms> I got some improvement by trying harder to preserve case in some richard> sms> places: richard> sms> richard> sms> -$ call create_tsa_cert 1 tsa_cert richard> sms> +$ call create_tsa_cert 1 "tsa_cert" richard> sms> richard> sms> -$ call create_tsa_cert 2 non_tsa_cert richard> sms> +$ call create_tsa_cert 2 "non_tsa_cert" richard> sms> richard> sms> Knowing nothing, I'd guess that the missing "TSA_CERT" was actually richard> sms> supposed to be "tsa_cert". I normally run with Parse Style: Extended, richard> sms> and that may make me more vulnerable to these things. Or, it could just richard> sms> be lame DCL. (Finally, there's a good reason to use: richard> sms> X = "aBc" richard> sms> instead of: richard> sms> X := aBc richard> sms> among other things.) richard> sms> richard> sms> And correcting some file names: richard> sms> richard> sms> -$ open/write file VMStsa-response1.create_tsa_cert richard> sms> +$ open/write file VMStsa-response_1.create_tsa_cert richard> sms> richard> sms> -$ define/user sys$input VMStsa-response.create_tsa_cert richard> sms> +$ define/user sys$input VMStsa-response_1.create_tsa_cert richard> sms> richard> sms> -$ open/write file VMStsa-response2.create_tsa_cert richard> sms> +$ open/write file VMStsa-response_2.create_tsa_cert richard> sms> richard> sms> -$ define/user sys$input VMStsa-response.create_tsa_cert richard> sms> +$ define/user sys$input VMStsa-response_2.create_tsa_cert richard> sms> richard> sms> Creating a file named one thing and then using a file named some other richard> sms> thing looked suspicious to me. richard> sms> richard> sms> The next problem I saw in that test: richard> sms> richard> sms> unable to load certificates: ./tsaca.pem richard> sms> richard> sms> seems to be an inability to find a file specified in the ".cnf" file: richard> sms> richard> sms> certs = $dir/tsaca.pem richard> sms> richard> sms> The shell script seems to say things like "-out tsaca.pem -keyout richard> sms> tsacakey.pem", while the DCL never mentions "tsaca.pem". Either more richard> sms> code theft or else less would seem to be in order here. richard> sms> richard> sms> ------------------------------------------------------------------------ richard> sms> richard> sms> Steven M. Schweda s...@antinode-info richard> sms> 382 South Warwick Street (+1) 651-699-9818 richard> sms> Saint Paul MN 55105-2547 richard> sms> ______________________________________________________________________ richard> sms> OpenSSL Project http://www.openssl.org richard> sms> Development Mailing List openssl-dev@openssl.org richard> sms> Automated List Manager majord...@openssl.org ----- Please consider sponsoring my work on free software. See http://www.free.lp.se/sponsoring.html for details. -- Richard Levitte rich...@levitte.org http://richard.levitte.org/ "Life is a tremendous celebration - and I'm invited!" -- from a friend's blog, translated from Swedish ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager majord...@openssl.org
