|Thank you for looking at this :)
|
|========= Encrypting on Windows
C:\test>\ssl\bin\openssl enc -aes128 -in test.odt -out test98.odt.aes
(OpenSSL 0.9.8e 23 Feb 2007)
|
| C:\test>\ssl\bin\openssl enc -aes128 -in test.odt -out test97.odt.aes
(OpenSSL 0.9.7m-fips 23 Feb 2007)|
|Cross-decryption on Windows yielded the following SHA1s:
C:\test>sha1sum test*
db9c6848e59fd6ec8039544ec3383df2c262b0e4 test.odt
db9c6848e59fd6ec8039544ec3383df2c262b0e4 test97
db9c6848e59fd6ec8039544ec3383df2c262b0e4 test98|
|So all works nicely there. On Solaris it is a different thing:
|
|decrypting test98.odt.aes using (OpenSSL 0.9.7m-fips 23 Feb 2007) on
Solaris 10:
/ssl/bin/openssl enc -aes128 -d -in test98.odt.aes -out test98
enter aes-128-cbc decryption password:
bad decrypt
27772:error:06065064:digital envelope routines:EVP_DecryptFinal:bad
decrypt:evp_enc.c:509:|
|decrypting test97.odt.aes using (OpenSSL 0.9.7m-fips 23 Feb 2007) on
Solaris 10:
/ssl/bin/openssl enc -aes128 -d -in test97.odt.aes -out test97
enter aes-128-cbc decryption password:
bad decrypt
28108:error:06065064:digital envelope routines:EVP_DecryptFinal:bad
decrypt:evp_enc.c:509:|
|========= Encrypting on Solaris|
| [nasa ~]$ /usr/local/ssl/bin/openssl dgst -sha1 test.odt
SHA1(test.odt)= db9c6848e59fd6ec8039544ec3383df2c262b0e4|
|[nasa ~]$ /usr/local/ssl/bin/openssl enc -aes128 -in test.odt -out
test98s.odt.aes
enter aes-128-cbc encryption password:
Verifying - enter aes-128-cbc encryption password:
|
|The SHA1 matches. Let’s try to decrypt on Windows:
|
|0.9.8e:
C:\test>\openssl\bin\openssl enc -aes128 -d -in test98s.odt.aes -out test98s
enter aes-128-cbc decryption password:
bad decrypt
3908:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad
decrypt:.\
crypto\evp\evp_enc.c:461:|
|0.9.7m:
C:\test>\ssl\bin\openssl enc -aes128 -d -in test98s.odt.aes -out test98s_
enter aes-128-cbc decryption password:
bad decrypt
828:error:06065064:digital envelope routines:EVP_DecryptFinal:bad
decrypt:evp_enc.c:509:|
|Leonard Elia
NASA LaRC
|
|
|
|
|
Thomas J. Hruska wrote:
Elia, Leonard F. wrote:
Hello All,
I built OpenSSL with the FIPS module, and after a few issues built it
successfully on Solaris 10 (using Sun cc) and on Windows using MinGW.
Each works fine on its own platform, but if I encrypt on Solaris 10,
I get decryption errors on Windows, and vice versa.
Any ideas?
Leonard Elia
NASA LaRC
Cool. NASA uses OpenSSL.
Got some command-lines/source code/error messages we can use to
duplicate?
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [email protected]
Automated List Manager [EMAIL PROTECTED]
