Hello,
thanks for the patch.
It works fine for openssl 1.* without FIPS mode, but does not succeed with
openssl-0.9.8i as shown below. I wont be able to apply this patch unless it is
backwards compatible with earlier versions of openssl still in common use.
Cheers.
cc -c -I/tmp/openssl-0.9.8i+extensions/include -D_REENTRANT -D_GNU_SOURCE -
DPERL_USE_SAFE_PUTENV -fno-strict-aliasing -pipe -fstack-protector -
D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -O2 -g -DVERSION=\"1.49\" -
DXS_VERSION=\"1.49\" -fPIC "-I/usr/lib/perl5/5.16.0/i586-linux-thread-
multi/CORE" SSLeay.c
Running Mkbootstrap for Net::SSLeay ()
chmod 644 SSLeay.bs
rm -f blib/arch/auto/Net/SSLeay/SSLeay.so
LD_RUN_PATH="/lib" cc -shared -fomit-frame-pointer -fmessage-length=0 -O2 -
Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-
unwind-tables -g -Wall -pipe SSLeay.o -o blib/arch/auto/Net/SSLeay/SSLeay.so
\
-L/tmp/openssl-0.9.8i+extensions -L/tmp/openssl-0.9.8i+extensions/lib -lssl
-lcrypto -lz \
chmod 755 blib/arch/auto/Net/SSLeay/SSLeay.so
cp SSLeay.bs blib/arch/auto/Net/SSLeay/SSLeay.bs
chmod 644 blib/arch/auto/Net/SSLeay/SSLeay.bs
PERL_DL_NONLAZY=1 /usr/bin/perl "-MExtUtils::Command::MM" "-e"
"test_harness(0, 'inc', 'blib/lib', 'blib/arch')" t/local/*.t
t/handle/local/*.t
t/handle/local/05_use.t ................ ok
t/local/01_pod.t ....................... ok
t/local/02_pod_coverage.t .............. skipped: Test::Pod::Coverage 1.00
required for testing POD coverage
t/local/03_use.t ....................... ok
t/local/04_basic.t ..................... 1/6 # Version info:
# Testing Net::SSLeay 1.49, Perl 5.016000, /usr/bin/perl
# OpenSSL version: 'OpenSSL 0.9.8i 15 Sep 2008'
# OpenSSL platform: 'platform: linux-elf'
t/local/04_basic.t ..................... ok
t/local/05_passwd_cb.t ................. 1/13
# Failed test 'CTX_use_PrivateKey_file works with right passphrase and
userdata'
# at t/local/05_passwd_cb.t line 63.
# Failed test 'CTX_use_PrivateKey_file works with right passphrase and
userdata'
# at t/local/05_passwd_cb.t line 66.
# Failed test 'CTX_use_PrivateKey_file works with right passphrase and
without userdata'
# at t/local/05_passwd_cb.t line 69.
# Looks like you failed 3 tests of 13.
t/local/05_passwd_cb.t ................. Dubious, test returned 3 (wstat 768,
0x300)
Failed 3/13 subtests
t/local/06_tcpecho.t ................... ok
t/local/07_sslecho.t ................... ok
t/local/08_pipe.t ...................... ok
t/local/15_bio.t ....................... ok
t/local/20_autoload.t .................. ok
t/local/21_constants.t ................. ok
t/local/30_error.t ..................... ok
t/local/31_rsa_generate_key.t .......... ok
t/local/32_x509_get_cert_info.t ........ ok
t/local/33_x509_create_cert.t .......... ok
t/local/34_x509_crl.t .................. ok
t/local/35_ephemeral.t ................. ok
t/local/36_verify.t .................... ok
t/local/37_asn1_time.t ................. ok
t/local/38_priv-key.t .................. 1/10
# Failed test 'PEM_read_bio_PrivateKey encrypted - callback'
# at t/local/38_priv-key.t line 24.
# Failed test 'PEM_read_bio_PrivateKey encrypted - password'
# at t/local/38_priv-key.t line 29.
# Looks like you failed 2 tests of 10.
t/local/38_priv-key.t .................. Dubious, test returned 2 (wstat 512,
0x200)
Failed 2/10 subtests
t/local/39_pkcs12.t .................... ok
t/local/40_npn_support.t ............... skipped: openssl 1.0.1 required
t/local/50_digest.t .................... ok
t/local/61_threads-cb-crash.t .......... ok
t/local/62_threads-ctx_new-deadlock.t .. ok
t/local/kwalitee.t ..................... ok
Test Summary Report
-------------------
t/local/05_passwd_cb.t (Wstat: 768 Tests: 13 Failed: 3)
Failed tests: 5, 7, 9
Non-zero exit status: 3
t/local/38_priv-key.t (Wstat: 512 Tests: 10 Failed: 2)
Failed tests: 4, 6
Non-zero exit status: 2
Files=27, Tests=2567, 5 wallclock secs ( 0.21 usr 0.02 sys + 4.42 cusr
0.20 csys = 4.85 CPU)
Result: FAIL
Failed 2/27 test programs. 5/2567 subtests failed.
make: *** [test_dynamic] Error 255
On Friday, November 30, 2012 09:08:02 AM you wrote:
Show quoted text> Queue: Net-SSLeay
> Ticket <URL:
https://rt.cpan.org/Ticket/Display.html?id=81347 >
>
> On Fri, Nov 30, 2012 at 08:44:39AM -0500, mikem@open.com.au via RT wrote:
>
> They do not call any FIPS related functions. And the other calls are
> conditionalized by OpenSSL version exactly the same way you already have in
> thests. I tested only 1.0.0j and 1.0.1c versions compiled with FIPS.
>
> -- Petr
--
Mike McCauley mikem@open.com.au
Open System Consultants Pty. Ltd
9 Bulbul Place Currumbin Waters QLD 4223 Australia
http://www.open.com.au
Phone +61 7 5598-7474 Fax +61 7 5598-7070
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS,
TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP,
DIAMETER etc. Full source on Unix, Windows, MacOSX, Solaris, VMS, NetWare etc.
