Re: Issue 39 in direct-certificate-discovery-tool: OpenSSL error email response

2 views
Skip to first unread message

direct-certifica...@googlecode.com

unread,
Nov 26, 2012, 4:28:19 PM11/26/12
to modular-sp...@googlegroups.com

Comment #3 on issue 39 by michal.k...@esacinc.com: OpenSSL error email
response
http://code.google.com/p/direct-certificate-discovery-tool/issues/detail?id=39

I have a feeling that the issue may be coming from the hosting environment
of the Test Tool instead of the users' Direct implementations.

Looking at the dwFlags option in the link David posted
(http://msdn.microsoft.com/en-us/library/windows/desktop/aa379913%28v=vs.85%29.aspx),
both the possible padding flags require the presence of a newer/better
version of the crytographic provider for Windows environments (judging by
the Test Tool's OpenSSL command line I'm assuming its deployed on a
Microsoft OS).

On the page for the Microsoft Enhanced Crytographic Provider
(http://msdn.microsoft.com/en-us/library/windows/desktop/aa386986%28v=vs.85%29.aspx)
it says that the newer provider has only recently starting to be shipped as
the default (the page is labeled with 'Build date: 10/16/2012').

I'm guessing that OpenSSL is internally trying to call CryptDecrypt (or a
nested call to something that checks padding?) with parameters it can't
understand.

Could you try updating the cryptographic provider on the Test Tool's OS? I
think I found the right download here:
http://www.microsoft.com/en-us/download/details.aspx?id=25281#overview

direct-certifica...@googlecode.com

unread,
Nov 26, 2012, 4:50:30 PM11/26/12
to modular-sp...@googlegroups.com

Comment #4 on issue 39 by michal.k...@esacinc.com: OpenSSL error email
response
http://code.google.com/p/direct-certificate-discovery-tool/issues/detail?id=39

Both this issue and issue 43
(https://code.google.com/p/direct-certificate-discovery-tool/issues/detail?id=43)
seem to be caused by failure(s) during PKCS#7 encryption/decryption and
thus may be duplicates (or at least possibly related).

direct-certifica...@googlecode.com

unread,
Nov 27, 2012, 1:52:20 PM11/27/12
to modular-sp...@googlegroups.com
Updates:
Owner: edward.o...@nitorgroup.com

Comment #5 on issue 39 by edward.o...@nitorgroup.com: OpenSSL error email
response
http://code.google.com/p/direct-certificate-discovery-tool/issues/detail?id=39

(No comment was entered for this change.)

direct-certifica...@googlecode.com

unread,
Dec 10, 2012, 1:57:19 PM12/10/12
to modular-sp...@googlegroups.com
Updates:
Owner: Sandeep....@nitorgroup.com

Comment #6 on issue 39 by edward.o...@nitorgroup.com: OpenSSL error email
Reply all
Reply to author
Forward
0 new messages