NetBSD-Bugs archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

misc/41628: OpenSSL's c_rehash can't find openssl binary (patch supplied)



>Number:         41628
>Category:       misc
>Synopsis:       OpenSSL's c_rehash can't find openssl binary (patch supplied)
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    misc-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Tue Jun 23 09:55:00 +0000 2009
>Originator:     Jukka Salmi
>Release:        NetBSD HEAD and all releases
>Organization:
>Environment:
n/a
>Description:
Due to a bug in OpenSSL's c_rehash tool it can't be used on a NetBSD
system to populate /etc/openssl/certs with symlinks to the hash values
of certificates.

This problem has been [1]reported to the OpenSSL project as ticket #1901
and is fixed on the OpenSSL_1_0_0-stable branch.

[1] http://rt.openssl.org/Ticket/Display.html?id=1901
>How-To-Repeat:
Add some certificates to /etc/openssl/certs and run

$ c_rehash /etc/openssl/certs
Doing /etc/openssl/certs
sh: /root/openssl: not found
[...]
>Fix:
The following patch fixes the problem.  It's also available from
http://salmi.ch/~jukka/patches/nbsd/HEAD/crypto/dist/openssl/tools/c_rehash.patch

Index: crypto/dist/openssl/tools/c_rehash
===================================================================
RCS file: /cvsroot/src/crypto/dist/openssl/tools/c_rehash,v
retrieving revision 1.1.1.13
diff -u -p -r1.1.1.13 c_rehash
--- crypto/dist/openssl/tools/c_rehash  9 May 2008 21:34:47 -0000       1.1.1.13
+++ crypto/dist/openssl/tools/c_rehash  23 Jun 2009 09:27:07 -0000
@@ -31,6 +31,7 @@ if(! -x $openssl) {
        foreach (split /$path_delim/, $ENV{PATH}) {
                if(-x "$_/$openssl") {
                        $found = 1;
+                       $openssl = "$_/$openssl";
                        last;
                }       
        }
Index: crypto/dist/openssl/tools/c_rehash.in
===================================================================
RCS file: /cvsroot/src/crypto/dist/openssl/tools/c_rehash.in,v
retrieving revision 1.1.1.4
diff -u -p -r1.1.1.4 c_rehash.in
--- crypto/dist/openssl/tools/c_rehash.in       9 May 2008 21:34:47 -0000       
1.1.1.4
+++ crypto/dist/openssl/tools/c_rehash.in       23 Jun 2009 09:27:07 -0000
@@ -31,6 +31,7 @@ if(! -x $openssl) {
        foreach (split /$path_delim/, $ENV{PATH}) {
                if(-x "$_/$openssl") {
                        $found = 1;
+                       $openssl = "$_/$openssl";
                        last;
                }       
        }



Home | Main Index | Thread Index | Old Index