[openssl-users] troubleshooting a puzzling issue

Thierry Parmentelat thierry.parmentelat at inria.fr
Fri Jan 13 15:17:14 UTC 2017


Thanks Viktor for your feedback


Well, the 2 certificates are embedded in the python code as PEM; I am attaching them again here as plain files if that helps

-------------- next part --------------
A non-text attachment was scrubbed...
Name: p1
Type: application/octet-stream
Size: 834 bytes
Desc: not available
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20170113/67d37814/attachment.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: p2
Type: application/octet-stream
Size: 786 bytes
Desc: not available
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20170113/67d37814/attachment-0001.obj>
-------------- next part --------------



In terms of versioning, on one box that exhibits the issue of returning -1, I have this:

# cat /etc/fedora-release
Fedora release 24 (Twenty Four)

both openssl and m2crypto installed from fedora?s stock repos:

# rpm -q m2crypto openssl-libs
m2crypto-0.23.0-2.fc24.x86_64
openssl-libs-1.0.2j-3.fc24.x86_64

# uname -a
Linux r2labsfa.pl.sophia.inria.fr 4.8.15-300.fc25.x86_64 #1 SMP Thu Dec 15 23:10:23 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux


I hope it clarifies ? thanks for looking into this ? Thierry


> On 13 Jan 2017, at 15:26, Viktor Dukhovni <openssl-users at dukhovni.org> wrote:
> 
> 
>> On Jan 13, 2017, at 5:28 AM, Thierry Parmentelat <thierry.parmentelat at inria.fr> wrote:
>> 
>> I have two certificates, one being signed by the other
>> the attached code is a python code that uses M2Crypto to check for that fact
> 
> Your current problem is failure to post the two certificates along with
> the anecdotal description.  You're also not reporting which versions of
> the various O/S distributions you were using, and more importantly which
> versions of OpenSSL were linked into Python's M2Crypto.
> 
> Real answers require real data.
> 
> -- 
> -- 
> 	Viktor.
> 
> -- 
> openssl-users mailing list
> To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users



More information about the openssl-users mailing list