DO NOT REPLY [Bug 35469] New: - fails to decrypt PKCS#8 keyfile

[bu...@apache.org]

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=35469>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=35469

           Summary: fails to decrypt PKCS#8 keyfile
           Product: Apache httpd-2.0
           Version: 2.0.54
          Platform: Sun
        OS/Version: Solaris
            Status: NEW
          Severity: normal
          Priority: P2
         Component: mod_ssl
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: nickeg@northridge.com
                CC: nickeg@northridge.com


This might be related to Bug# 34520
I was able to build Apache 2.0.54 with mod_ssl on Solais 9 using OpenSSL 0.9.7g.
HTTPD will start with any clear text key created using:

openssl genrsa -out clr.rsa 1024
 or
openssl pkcs8 -nocrypt -topk8 -in clr.rsa -out clr.pkcs8

Also starts fine, prompting for pass phrase, if key was created with:

openssl rsa -in clr.rsa -des -out enc.rsa

However, it will not accept the pass phrase for any key created using:

openssl pkcs8 -v1 PBE-MD5-DES -in clr.rsa -topk8 -out enc.des.v1.pkcs8
 or
openssl pkcs8 -v2 des -in clr.rsa -topk8 -out enc.des.v2.pkcs8
 or
openssl pkcs8 -v2 des3 -in clr.rsa -topk8 -out enc.des3.v2.pkcs8

All of the created keys are readable and results identical when the command:

openssl rsa -in <keyfile> -noout -text

is issued against them.

One of the core OpenSSL developers suggests that:

"They may be missing some calls to add the PBE algorithms. This is automatic if
you call OpenSSL_add_all_algorithms() but needs to be handled if algorithms
are being added manually."

Additional information:
mod_jk and mpm_worker are also built-in. When started with a clear text key or a
encrypted key in the "old" format, the server runs flawlessly.

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org