Hi,
Am 20.08.2010 11:33, schrieb Guenter via RT:
> while hacking on a script where I use the openssl commandline tool for
> processing PEM certs I found that suprisingly the md5 fingerprint output
> always goes to stdout instead of using the -out stream, f.e. when using:
> openssl x509 -md5 -fingerprint -text -inform PEM -in tmpin.crt -out
> tmpout.crt
> the md5 fingerprint output goes to stdout while the whole rest of output
> goes into tmpout.crt as expected ...
> is this now intended behaviour, or just an oversight? If the latter I
> would look into the sources for fixing it ...
> tested versions:
> OpenSSL 0.9.8o 01 Jun 2010
> OpenSSL 1.0.0a 1 Jun 2010
I've meanwhile checked apps/x509.c, and patching it to send output to
file is trivial (attached); but looking at the other output options
around these lines makes me a bit unsure if these options are intended
to go to STDOUT rather than to honor a file option? However if the later
then I'm asking me why? Almost all options print their output to STDOUT
and ignore a file option - except for the text option ...
thanks, Gün.
--- x509.c.orig Fri Jun 26 13:34:21 2009
+++ x509.c Fri Aug 27 23:32:32 2010
@@ -898,11 +898,11 @@
BIO_printf(bio_err,"out of memory\n");
goto end;
}
- BIO_printf(STDout,"%s Fingerprint=",
+ BIO_printf(out,"%s Fingerprint=",
OBJ_nid2sn(EVP_MD_type(digest)));
for (j=0; j<(int)n; j++)
{
- BIO_printf(STDout,"%02X%c",md[j],
+ BIO_printf(out,"%02X%c",md[j],
(j+1 == (int)n)
?'\n':':');
}
--- x509.c.orig Tue Jan 12 19:27:09 2010
+++ x509.c Fri Aug 27 23:38:23 2010
@@ -932,11 +932,11 @@
BIO_printf(bio_err,"out of memory\n");
goto end;
}
- BIO_printf(STDout,"%s Fingerprint=",
+ BIO_printf(out,"%s Fingerprint=",
OBJ_nid2sn(EVP_MD_type(fdig)));
for (j=0; j<(int)n; j++)
{
- BIO_printf(STDout,"%02X%c",md[j],
+ BIO_printf(out,"%02X%c",md[j],
(j+1 == (int)n)
?'\n':':');
}
