[gnutls-devel] GnuTLS | Certtool error when generating a selfsigned x25519 certificate (#1524)

Read-only notification of GnuTLS library development activities gnutls-devel at lists.gnutls.org
Thu Jan 18 15:13:57 CET 2024



Iisakki Jaakkola created an issue: https://gitlab.com/gnutls/gnutls/-/issues/1524



## Description of problem:

Generating a selfsigned certificate with certtool fails with `crt_get_preferred_hash_algorithm: GnuTLS internal error.` 

## Version of gnutls used:

3.8.3

## Distributor of gnutls (e.g., Ubuntu, Fedora, RHEL)

Arch Linux

## How reproducible:

```bash
$ certtool --generate-privkey --key-type=x25519 --outfile test-certificate.key
$ certtool --generate-self-signed --load-privkey test-certificate.key --outfile test-certificate.pem
```

You can just leave the answers to everything but the expiration date empty (it did happen with real data too).
Finally after you confirm that everything is ok you will get this response:

```bash
Signing certificate...
crt_get_preferred_hash_algorithm: GnuTLS internal error.
```

No certificate file is produced.

Exit code is 1.


_I'm not quite sure whether this generation even should succeed, but surely there should at least be a more informative error._

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/issues/1524
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20240118/6fe4f35b/attachment.html>


More information about the Gnutls-devel mailing list