Re: [PATCH] Apache-Test/lib/Apache/TestSSLCA.pm to always generate PKCS#1 keys with opensssl >= 3
Yann Ylavic <[email protected]> Wed, 18 Oct 2023 15:31:36 +0200
| Newsgroups | gmane.comp.apache.mod-perl.devel |
|---|---|
| Message-ID | <CAKQ1sVN8rBb9Mp2zG3sQMP-qzWUXrSu0j-RzRy0ty+pcH6yk4Q@mail.gmail.com> |
On Wed, Oct 18, 2023 at 3:09=E2=80=AFPM Yann Ylavic <[email protected]> = wrote: > > This is not an issue as long as httpd and TestSSLCA.pm use the same > openssl version (either < 3 or >=3D 3), but if e.g. httpd is > compiled/linked/-rpath'ed against an openssl < 3 and TestSSLCA.pm uses > the system's openssl >=3D 3 then mod_proxy won't be able to load the > PKCS#8 keys. Note that this can be workarounded by running the httpd perl framework with something like: $ APACHE_TEST_OPENSSL_CMD=3D/httpd/linked/version/of/openssl/bin/openssl t/TEST ... when running the httpd perl test framework.