small bug in certificate handling
Hans.Aschauer at gi-de.com
Hans.Aschauer at gi-de.com
Mon Sep 4 10:59:40 CEST 2006
Hi all,
for a demo system, I installed Minisip for use with Mikey (authenticated
D-H), which
did not work (Mikey PSK was ok, after telling openser to allow SIP packages
larger
than 2 kB...).
The only response which I got was "Incoming key management message
could not be authenticated", which came from X509_verify_cert() returning 0
in
certificate::control(), even though the certificates validated ok on the
command line,
using "openssl validate".
I solved the problem by adding a call to OpenSSL_add_all_algorithms()
(without
arguments) in the constructor of ca_db in the openSSL version of cert.cxx
(libmcrypto). Actually, there might be a better place where to add this
call
More information about the Minisip-devel
mailing list