Mercurial > trustbridge
comparison ui/tests/data/NOTES @ 359:f6ce186cebc2
If DO_RELEASE_BUILD is set use pubkey-release and test with it
This currently fails because polarssl rejects keys with
a public exponent larger then 64 bit.
With the following patch all tests pass. But this
currently awaits upstream comment.
https://polarssl.org/discussions/bug-report-issues/rsa-keys-with-large-public-exponents-are-rejected
--- rsa.c.orig 2014-04-10 17:22:32.727290031 +0200
+++ rsa.c 2014-04-10 17:22:38.847410225 +0200
@@ -154,7 +154,7 @@
return( POLARSSL_ERR_RSA_KEY_CHECK_FAILED );
if( mpi_msb( &ctx->E ) < 2 ||
- mpi_msb( &ctx->E ) > 64 )
+ mpi_msb( &ctx->E ) > POLARSSL_MPI_MAX_BITS )
return( POLARSSL_ERR_RSA_KEY_CHECK_FAILED );
return( 0 );
| author | Andre Heinecke <andre.heinecke@intevation.de> |
|---|---|
| date | Thu, 10 Apr 2014 17:50:44 +0200 |
| parents | 534df06d5c67 |
| children | d0192a7e63df |
comparison
equal
deleted
inserted
replaced
| 358:9ba7b4b4c1de | 359:f6ce186cebc2 |
|---|---|
| 16 cat list-valid.txt >> list-valid-other-signature.txt | 16 cat list-valid.txt >> list-valid-other-signature.txt |
| 17 echo -e S:$(openssl dgst -sha1 -sign testkey-other.pem < list-valid.txt | base64 -w0)\\r > list-valid-sha1-signature.txt | 17 echo -e S:$(openssl dgst -sha1 -sign testkey-other.pem < list-valid.txt | base64 -w0)\\r > list-valid-sha1-signature.txt |
| 18 cat list-valid.txt >> list-valid-sha1-signature.txt | 18 cat list-valid.txt >> list-valid-sha1-signature.txt |
| 19 cp list-valid-signed.txt list-invalid-signed.txt | 19 cp list-valid-signed.txt list-invalid-signed.txt |
| 20 tail -1 list-valid.txt >> list-invalid-signed.txt | 20 tail -1 list-valid.txt >> list-invalid-signed.txt |
| 21 | |
| 22 # To create test data for something you might want to release | |
| 23 | |
| 24 PRIVKEY=... | |
| 25 echo -e S:$(openssl dgst -sha256 -sign $PRIVKEY < list-valid.txt | base64 -w0)\\r > list-valid-signed-release.txt | |
| 26 cat list-valid.txt >> list-valid-signed-release.txt | |
| 21 | 27 |
| 22 # List with 0 created manually by placing a \0 in the signature | 28 # List with 0 created manually by placing a \0 in the signature |
| 23 | 29 |
| 24 # Test server certificate: | 30 # Test server certificate: |
| 25 | 31 |