Bug in openssl-1.0.2a when disabling DES

Osvaldo Calles osvaldo.calles at gmail.com
Wed Jun 3 01:52:58 UTC 2015


Self-test report generated by 'make report' - testlog attached

Application Details (name, version)
 - openssl-1.0.2a

Problem Description

./Configure linux-x86_64 no-des
make depend
make

../libcrypto.a(cms_kari.o): In function `cms_RecipientInfo_kari_encrypt':
cms_kari.c:(.text+0xa21): undefined reference to `EVP_des_ede3_wrap'
collect2: error: ld returned 1 exit status
../Makefile.shared:164: recipe for target 'link_app.' failed



when OPENSSL_NO_DES is defined (no-des), the cms utility (Cryptographic
Message Syntax) should not use des3 for encryption.

------------------
In file cms_kari.c at line 400

if (EVP_CIPHER_type(cipher) == NID_des_ede3_cbc)
kekcipher = EVP_des_ede3_wrap();

------------------

An error message should be printed to the final user "des3 not supported"

-- 
:[ Saludos .... Osvaldo Calles :[
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-bugs-mod/attachments/20150602/09f3f133/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: testlog
Type: application/octet-stream
Size: 19285 bytes
Desc: not available
URL: <http://mta.openssl.org/pipermail/openssl-bugs-mod/attachments/20150602/09f3f133/attachment-0001.obj>


More information about the openssl-bugs-mod mailing list