[botan-devel] Botan 1.8.11 validate error (X.509)

Jack Lloyd lloyd at randombit.net
Fri Apr 1 07:36:01 EDT 2011


Hi Pedro,

Interesting. I cannot replicate this on my machine and have not seen it on
test runs on any platform. It also doesn't show up in any of the Debian
build logs for 1.8.11 [1]. Normally my guess would be a compiler
miscompilation, which is not terribly uncommon. However there were some
changes to CRL encoding in 1.8.11, so quite possibly just a bug that
doesn't show up on my platforms for whatever reason.

Can you try recompiling with -O1 or -O0? As a first pass, just edit the
makefile, remove build/lib/x509* and build/lib/asn* and see if that makes
any difference.

I'd also be curious if 1.8.10 has the same problem for you.

-Jack

[1] https://buildd.debian.org/build.cgi?pkg=botan1.8&dist=sid

On Fri, Apr 01, 2011 at 11:18:09AM +0100, Pedro Polonia wrote:
> Hello all.
> 
>    I'm benchmarking crypto libs, so i download Botan 1.9.14 and 1.8.11.
> Botan 1.9.14 is fine, but i got this error:
> 
> > pdpolonia at nb-djfjdn1:~/Downloads/crypto_libs/botan/Botan-1.8.11$ ./check
> > --validate
> > Beginning tests...
> > Testing Block Ciphers:
> > ...............................................................................................
> > Testing Cipher Modes (Encryption): ..................
> > Testing Cipher Modes (Decryption): .............
> > Testing Stream Ciphers: ............
> > (...)
> > Testing PK key generation: ..............
> > Testing X.509 CA/CRL/cert/cert request: .............Exception caught:
> > Botan: Decoding error: X509 CRL decoding failed (BER: Tag mismatch when
> > decoding)
> > pdpolonia at nb-djfjdn1:~/Downloads/crypto_libs/botan/Botan-1.8.11$
> 
> 
>   I'm running Ubuntu 10.10. What additional information do you need? Is a
> well known bug?
> 
>     Thanks in Advance,
> 
>       Pedro
> --
>                          ______________
>  +----------------------/___________  /\----------------------------------+
>  | Pedro David Polónia  \  ________/ / /   "Change alone is unchanging."  |
>  |                       \ \ \    / / /                   - Heráclito     |
>  |  +351 96 4114085       \ \ \  / / /                                    |
>  |  polonia2 at gmail.com     \ \ \/ / /   http://www.ppolonia.com/pshield   |
>  | Pgpfinger 0A79 F162 035E \ \ \/ /  3725 91D1 ECC0 2433 C0BC A8A7 8DD7  |
>  +---------------------------\ \  /---------------------------------------+
>                               \_\/

> _______________________________________________
> botan-devel mailing list
> botan-devel at randombit.net
> http://lists.randombit.net/mailman/listinfo/botan-devel




More information about the botan-devel mailing list