[openssl-users] test make_verify fails on brand new red hat enterprise 7 box

[Matt Caswell]

On 18/05/18 16:22, Philippe Anctil wrote:
> Hi,
> 
> I have been compiling openssl libraries on RHEL5 for a while without
> issue. My build for 1.0.2k fails on a new RHEL7 server. I have narrowed
> down the cause to the make_verify test. 
> 
> 
> 
> make verify_test # from test dir

I think you meant "make test_verify"

> It seems to boil down to the following
> 
> 
> 
> OPENSSL_CONF= LD_LIBRARY_PATH=.. ../apps/openssl verify -CApath
> ../certs/demo ../certs/demo/ca-cert.pem
> 
> WARNING: can't open config file:
> ../certs/demo/ca-cert.pem: C = AU, ST = Queensland, O = CryptSoft Pty
> Ltd, CN = Test CA (1024 bit)
> error 20 at 0 depth lookup:unable to get local issuer certificate
> 
> echo $?
> 
> 2

So what does your certs/demo directory look like? Do you have the
necessary symbolic links (created during "make" somewhere I think). Are
all permissions and file sizes as expected? Mine looks like this:

$ ls -l
total 16
lrwxrwxrwx 1 matt matt   11 May 18 17:10 3f77a2b5.0 -> ca-cert.pem
-rw-r--r-- 1 matt matt 1953 May 18 16:47 ca-cert.pem
lrwxrwxrwx 1 matt matt   10 May 18 17:10 cbdbd8bc.0 -> dsa-ca.pem
lrwxrwxrwx 1 matt matt   11 May 18 17:10 de4fa23b.0 -> dsa-pca.pem
-rw-r--r-- 1 matt matt 2264 May 18 16:47 dsa-ca.pem
-rw-r--r-- 1 matt matt 2674 May 18 16:47 dsa-pca.pem
lrwxrwxrwx 1 matt matt   12 May 18 17:10 e83ef475.0 -> pca-cert.pem
-rw-r--r-- 1 matt matt 1953 May 18 16:47 pca-cert.pem


Matt