[JIRA] (CPPXT-153) test.pfx uses obsolete encryption algorithm, thus xmltoolingtest fails under OpenSSL 3
Ferenc Wágner (Jira)
jira at shibboleth.atlassian.net
Mon Jun 6 11:03:22 UTC 2022
Ferenc Wágner ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=6111238d6051c5006a368065 ) *created* an issue
XMLTooling - C++ ( https://shibboleth.atlassian.net/browse/CPPXT?atlOrigin=eyJpIjoiOGFjNjZlNzI3MWI3NDcwMDlhYmFkNTdlMmJkMWUwYWEiLCJwIjoiaiJ9 ) / Improvement ( https://shibboleth.atlassian.net/browse/CPPXT-153?atlOrigin=eyJpIjoiOGFjNjZlNzI3MWI3NDcwMDlhYmFkNTdlMmJkMWUwYWEiLCJwIjoiaiJ9 ) CPPXT-153 ( https://shibboleth.atlassian.net/browse/CPPXT-153?atlOrigin=eyJpIjoiOGFjNjZlNzI3MWI3NDcwMDlhYmFkNTdlMmJkMWUwYWEiLCJwIjoiaiJ9 ) test.pfx uses obsolete encryption algorithm, thus xmltoolingtest fails under OpenSSL 3 ( https://shibboleth.atlassian.net/browse/CPPXT-153?atlOrigin=eyJpIjoiOGFjNjZlNzI3MWI3NDcwMDlhYmFkNTdlMmJkMWUwYWEiLCJwIjoiaiJ9 )
Issue Type: Improvement Affects Versions: 3.2.1 Assignee: Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) Components: Build Created: 06/Jun/22 7:03 AM Labels: test Priority: Trivial Reporter: Ferenc Wágner ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=6111238d6051c5006a368065 )
xmltoolingtest/data/test.pfx uses RC2 encryption, which, being a legacy algorithm, isn’t available by default under OpenSSL 3. Ubuntu developers converted the file and skip the download [1], and the Debian packaging now loads the legacy algorithms for running the tests [2]. Neither is optimal, so please consider upgrading the encryption in the upstream repository (conversion step are available at [1]). Even if you don’t make a new release for this, network access to the upgraded file would help the tests, and the rest could be easily cherry-picked into the packaging.
Thanks for your consideration.
[1] https://bugs.launchpad.net/ubuntu/+source/xmltooling/+bug/1957166
[2] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1006581
( https://shibboleth.atlassian.net/browse/CPPXT-153#add-comment?atlOrigin=eyJpIjoiOGFjNjZlNzI3MWI3NDcwMDlhYmFkNTdlMmJkMWUwYWEiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/CPPXT-153#add-comment?atlOrigin=eyJpIjoiOGFjNjZlNzI3MWI3NDcwMDlhYmFkNTdlMmJkMWUwYWEiLCJwIjoiaiJ9 )
Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100200- sha1:38cf6ec )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220606/b443f930/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-65ee8918-664f-4a45-a000-4a28a3a9f90e
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220606/b443f930/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-d4aacc4b-a234-4269-a71b-1474c4820729
Type: image/png
Size: 457 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220606/b443f930/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-trivial-9fdf55ee-56f2-4175-9c5a-a9294caf5ecd
Type: image/png
Size: 563 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220606/b443f930/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-8cab37c9-785c-47fc-b50e-d10636c10b19
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220606/b443f930/attachment-0007.png>
More information about the commits
mailing list