[openssl-dev] [openssl.org #3910] [PATCH] Build correctly when no_des option is enabled

[Kurt Roeckx via RT]

On Sun, Jun 14, 2015 at 11:59:59PM +0000, 84.le0n via RT wrote:
> 
> I've had the same problem Osvaldo Calles had when building OpenSSL with
> no-des option enabled .
> This patch simply add an #ifndef around the first if clause avoiding
> EVP_des_ede3_wrap call.

This at least causes a test suite error:
/usr/bin/perl cms-test.pl
CMS => PKCS#7 compatibility tests
signed content DER format, RSA key: OK
signed detached content DER format, RSA key: OK
signed content test streaming BER format, RSA: OK
signed content DER format, DSA key: OK
signed detached content DER format, DSA key: OK
signed detached content DER format, add RSA signer: OK
signed content test streaming BER format, DSA key: OK
signed content test streaming BER format, 2 DSA and 2 RSA keys: OK
signed content test streaming BER format, 2 DSA and 2 RSA keys, no attributes: OK
signed content test streaming S/MIME format, 2 DSA and 2 RSA keys: OK
signed content test streaming multipart S/MIME format, 2 DSA and 2 RSA keys: OK
enveloped content test streaming S/MIME format, 3 recipients: generation error
Makefile:334: recipe for target 'test_cms' failed
make[1]: *** [test_cms] Error 1

I'm not sure what that code is trying to do, so I wonder if we
should return an error in case EVP_CIPHER_type(cipher) ==
NID_des_ede3_cbc but OPENSSL_NO_DES is
defined.


Kurt