I grabbed the func packages from koji for RHEL 5 and installed them on a
system, I am not getting a segmentation fault when trying to sign a
certificate using certmaster-ca. After poking around for a bit, it looks
like the segmentation fault is coming from here:
/usr/lib/python2.4/site-packages/certmaster/certs.py(145)create_slave_certificate()
-> xt = crypto.X509Extension('basicConstraints', False ,'CA:FALSE')
And indeed just running that from the python shell kills it:
Python 2.4.3 (#1, Sep 8 2010, 11:37:47)
[GCC 4.1.2 20080704 (Red Hat 4.1.2-48)] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> from OpenSSL import crypto
>>> xt = crypto.X509Extension('basicConstraints', False ,'CA:FALSE')
Segmentation fault
Now I don't know what the true root cause of this is, it certainly looks
like the problem lies outside of func/certmaster but can anyone offer
any guidance on how to find it?
Also it looks like the version number is wrong in the koji packages, but
that is a small issue and I think it has already been fixed in the
source but maybe new packages should be built?
erinn@cc /usr/lib/python2.4/site-packages/certmaster $ rpm -q func
func-0.27-1.el5
erinn@cc /usr/lib/python2.4/site-packages/certmaster $ func --version
No handlers could be found for logger "svc"
version: 0.26
release: 1
source build date: Tue Sep 21 15:27:50 EDT 2010
git commit: 31eab6652863c93d1040065453a6c2a25126f1fd
git date: Mon Sep 20 14:39:34 2010 -0400
Thanks,
-Erinn
_______________________________________________
Func-list mailing list
Func-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/func-list
