small bug in certificate handling

Hans.Aschauer at gi-de.com Hans.Aschauer at gi-de.com
Mon Sep 4 10:59:40 CEST 2006


Hi all,

for a demo system, I installed Minisip for use with Mikey (authenticated
D-H), which
did not work (Mikey PSK was ok, after telling openser to allow SIP packages
larger
than 2 kB...).

The only response which I got was "Incoming key management message
could not be authenticated", which came from X509_verify_cert() returning 0
in
certificate::control(), even though the certificates validated ok on the
command line,
using "openssl validate".

I solved the problem by adding a call to OpenSSL_add_all_algorithms()
(without
arguments) in the constructor of ca_db in the openSSL version of cert.cxx
(libmcrypto). Actually, there might be a better place where to add this
call






More information about the Minisip-devel mailing list