On 11/08/2010 01:09 PM, "S.ÃaÄlar Onur" wrote:
> Hi Erinn,
>
> On Nov 8, 2010, at 1:16 PM, Erinn Looney-Triggs wrote:
>
>> I grabbed the func packages from koji for RHEL 5 and installed them on a
>> system, I am not getting a segmentation fault when trying to sign a
>> certificate using certmaster-ca. After poking around for a bit, it looks
>> like the segmentation fault is coming from here:
>> /usr/lib/python2.4/site-packages/certmaster/certs.py(145)create_slave_certificate()
>> -> xt = crypto.X509Extension('basicConstraints', False ,'CA:FALSE')
>>
>> And indeed just running that from the python shell kills it:
>> Python 2.4.3 (#1, Sep 8 2010, 11:37:47)
>> [GCC 4.1.2 20080704 (Red Hat 4.1.2-48)] on linux2
>> Type "help", "copyright", "credits" or "license" for more information.
>>>>> from OpenSSL import crypto
>>>>> xt = crypto.X509Extension('basicConstraints', False ,'CA:FALSE')
>> Segmentation fault
>>
>> Now I don't know what the true root cause of this is, it certainly looks
>> like the problem lies outside of func/certmaster but can anyone offer
>> any guidance on how to find it?
> Please see https://bugzilla.redhat.com/show_bug.cgi?id=637398 (https://www.redhat.com/archives/func-list/2010-September/msg00033.html)
>
>> Also it looks like the version number is wrong in the koji packages, but
>> that is a small issue and I think it has already been fixed in the
>> source but maybe new packages should be built?
>>
>> erinn@cc /usr/lib/python2.4/site-packages/certmaster $ rpm -q func
>> func-0.27-1.el5
>>
>> erinn@cc /usr/lib/python2.4/site-packages/certmaster $ func --version
>> No handlers could be found for logger "svc"
>> version: 0.26
>> release: 1
>> source build date: Tue Sep 21 15:27:50 EDT 2010
>> git commit: 31eab6652863c93d1040065453a6c2a25126f1fd
>> git date: Mon Sep 20 14:39:34 2010 -0400
>>
>> Thanks,
>> -Erinn
>>
>>
>> _______________________________________________
>> Func-list mailing list
>> Func-list@xxxxxxxxxx
>> https://www.redhat.com/mailman/listinfo/func-list
> --
> S.ÃaÄlar Onur <caglar@xxxxxxxxxxxxxxxx>
>
Ah excellent, thanks for that info, I too will open a support case,
maybe they will knock this out sometime in the next year or so.
-Erinn
_______________________________________________
Func-list mailing list
Func-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/func-list
