Re: [PATCH] Apache-Test/lib/Apache/TestSSLCA.pm to always generate PKCS#1 keys with opensssl >= 3

Yann Ylavic <[email protected]> Wed, 18 Oct 2023 15:31:36 +0200
Newsgroups gmane.comp.apache.mod-perl.devel
Message-ID <CAKQ1sVN8rBb9Mp2zG3sQMP-qzWUXrSu0j-RzRy0ty+pcH6yk4Q@mail.gmail.com>
On Wed, Oct 18, 2023 at 3:09=E2=80=AFPM Yann Ylavic <[email protected]> =
wrote:
>
> This is not an issue as long as httpd and TestSSLCA.pm use the same
> openssl version (either < 3 or >=3D 3), but if e.g. httpd is
> compiled/linked/-rpath'ed against an openssl < 3 and TestSSLCA.pm uses
> the system's openssl >=3D 3 then mod_proxy won't be able to load the
> PKCS#8 keys.

Note that this can be workarounded by running the httpd perl framework
with something like:
$ APACHE_TEST_OPENSSL_CMD=3D/httpd/linked/version/of/openssl/bin/openssl
t/TEST ...
when running the httpd perl test framework.