On 29/07/2018 21:27, brian m. carlson wrote:
On Sun, Jul 29, 2018 at 08:59:39PM +0200, Michael wrote:
On 29/07/2018 20:10, brian m. carlson wrote:
Are you using SHA1DC on that system, and does compiling with another
SHA-1 implementation help? There was a change to the SHA1DC code big
endian detection in that commit, which might be the cause of your
problems if you're using a POWER or PowerPC system.
I was thinking it might be an 'endian' issue. So, yes - AIX runs on POWER,
only as BigEndian.
Well, that explains it. I would recommend submitting a patch to
https://github.com/cr-marcstevens/sha1collisiondetection, and the we can
pull in the updated submodule with that fix.
Not sure I am smart enough to do that. I'll have to download, build, and
see what it says.
In the mean time, you could build using OpenSSL or the block SHA-1
implementation, and switch back once things are in a good state. I do
recommend using SHA1DC for things long term, though, as attacks on SHA-1
are only going to get better.
Any suggestions on where/how to do this?
root@x066:[/data/prj/aixtools/git/git-2.13.2]./configure --help | grep
-i sha
--sharedstatedir=DIR modifiable architecture-independent data
[PREFIX/com]
--datarootdir=DIR read-only arch.-independent data root
[PREFIX/share]
root@x066:[/data/prj/aixtools/git/git-2.13.2]./configure --help | grep ssl
--with-openssl use OpenSSL library (default is YES)
ARG can be prefix for openssl library and
headers
