| Subject: | Using keygen in taint |
In Crypt-OpenPGP-1.03
When running in a taint environment there was a problem calling Crypt/DSA/KeyChain.pm:36
Error:
Insecure dependency in `` while running with -T switch at /usr/local/share/perl/5.8.4/Crypt/DSA/KeyChain.pm line 36.
This was due to the OpenSSL variable being used to call the program, which the taint envirnment would not allow. The only way I could find round it was by editing line 31 of the above file from:
my $openssl = `which openssl`;
to:
my $openssl = $param{OpenSSL} || `which openssl`;
then adding an argument to the keygen function. "OpenSSL"
Cheers
Chris