>       From: owner-openssl-us...@openssl.org On Behalf Of gvfb
>       Sent: Tuesday, 31 May, 2011 18:17

>       <snip: trouble installing IMAP(?) and PHP on Ubuntu 11>
> Now I'm trying to walk the steps over again, so I will reinstall OpenSSL, 
> which is needed for the IMAP toolkit. However, when making OpenSSL 

Aside: the people here probably can't help with the IMAP and PHP 
parts. But we can try to help you get OpenSSL right.

> it did not pass the tests, and throws an error when trying to test 
> the x509v1 signing utility. 

For info: the x509 utility, which covers v1 and v3 and 
multiple functions not just signing. The first test cases 
are of *reformatting* v1 certificate files.

> <snip> I have some hints that point to the problem being with the 
> certificates, since the make of the OpenSSL throwed numerous warnings 
> about pem_all.c, pem_xaux.c and pem_x509.c being called through a 
> non-compatible type, and the making of PHP and OpenSSL throwing the errors

> I mentioned make me think the matter are the certificates. <snip>

See below.

>       The error that make test of OpenSSL throws is: 
>       echo test normal x509v1 certificate 
>       test normal x509v1 certificate 
>       sh ./tx509 2>/dev/null 
>       testing x509 conversions 
>       p -> d
>       make [1]: 
>        
>       ***[test_x509] Error 1 
>       make[1] : se sale del directorio
/home/gerardo/Descargas/openssl-0.9.8e/test 
>       make:***[tests] Error 

1. OpenSSL 0.9.8e is over 4 years old. I don't know about Ubuntu 
schedule, but I would hope they would have a newer version.
Poking around a little, I find packages.ubuntu.com/natty 
has openssl-0.9.8o listed. But in case it matters, there was 
a visible change in 0.9.8j Jan2009 in use of extensions, and 
0.9.8m Feb2010 and later specifically the renegotiation extension -- 
which was added partly to fix a serious Apache vulnerability!

2. Is the source you are building from a Ubuntu/Debian package 
(copied to your homedir?) or base release from www.openssl.org? 
If the former, are there any indications that it has been changed 
from base, and if so how, for example a patches list? 

3. Did you do 'config' and with what result, or 'Configure' and with 
what option(s)? What do you have in the first noncomment block of the 
toplevel Makefile (and is it recent)? 

4. Exactly what warnings did you get on 'make'? If they're too many, 
maybe the first 10 or so? For comparison, when I did 0.9.8e in 2007 
on RedHat (config'ed as plain linux-elf with shared) with gcc 3.4.4, 
I got no such warnings on the sourcefiles you name, and all tests worked.

5. Try running a single simple test with output visible:
  cd $BUILDDIR/test
  ../util/shlib_wrap.sh ../apps/openssl x509 -in testx509.pem -text 
Do you get better error message(s)? Or even normal output? 



______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to