comparison ui/tests/data/NOTES @ 359:f6ce186cebc2

If DO_RELEASE_BUILD is set use pubkey-release and test with it This currently fails because polarssl rejects keys with a public exponent larger then 64 bit. With the following patch all tests pass. But this currently awaits upstream comment. https://polarssl.org/discussions/bug-report-issues/rsa-keys-with-large-public-exponents-are-rejected --- rsa.c.orig 2014-04-10 17:22:32.727290031 +0200 +++ rsa.c 2014-04-10 17:22:38.847410225 +0200 @@ -154,7 +154,7 @@ return( POLARSSL_ERR_RSA_KEY_CHECK_FAILED ); if( mpi_msb( &ctx->E ) < 2 || - mpi_msb( &ctx->E ) > 64 ) + mpi_msb( &ctx->E ) > POLARSSL_MPI_MAX_BITS ) return( POLARSSL_ERR_RSA_KEY_CHECK_FAILED ); return( 0 );
author Andre Heinecke <andre.heinecke@intevation.de>
date Thu, 10 Apr 2014 17:50:44 +0200
parents 534df06d5c67
children d0192a7e63df
comparison
equal deleted inserted replaced
358:9ba7b4b4c1de 359:f6ce186cebc2
16 cat list-valid.txt >> list-valid-other-signature.txt 16 cat list-valid.txt >> list-valid-other-signature.txt
17 echo -e S:$(openssl dgst -sha1 -sign testkey-other.pem < list-valid.txt | base64 -w0)\\r > list-valid-sha1-signature.txt 17 echo -e S:$(openssl dgst -sha1 -sign testkey-other.pem < list-valid.txt | base64 -w0)\\r > list-valid-sha1-signature.txt
18 cat list-valid.txt >> list-valid-sha1-signature.txt 18 cat list-valid.txt >> list-valid-sha1-signature.txt
19 cp list-valid-signed.txt list-invalid-signed.txt 19 cp list-valid-signed.txt list-invalid-signed.txt
20 tail -1 list-valid.txt >> list-invalid-signed.txt 20 tail -1 list-valid.txt >> list-invalid-signed.txt
21
22 # To create test data for something you might want to release
23
24 PRIVKEY=...
25 echo -e S:$(openssl dgst -sha256 -sign $PRIVKEY < list-valid.txt | base64 -w0)\\r > list-valid-signed-release.txt
26 cat list-valid.txt >> list-valid-signed-release.txt
21 27
22 # List with 0 created manually by placing a \0 in the signature 28 # List with 0 created manually by placing a \0 in the signature
23 29
24 # Test server certificate: 30 # Test server certificate:
25 31

http://wald.intevation.org/projects/trustbridge/