Problem importing DEKART Certificate
max
max@telcom.md
Thu May 15 15:15:05 2003
Hi all,
I am trying to import a DEKART (www.dekart.com) root certificate. The problem
is that they used old algoritm to self-sign the certificate.
gpgsm --import
-----BEGIN CERTIFICATE-----
MIIDYDCCAx6gAwIBAgIEOmg6AzAJBgUrDgMCDQUAMIGWMQswCQYDVQQGEwJNRDEc
MBoGA1UECBMTUmVwdWJsaWMgb2YgTW9sZG92YTERMA8GA1UEBxMIS2lzaGluZXYx
DzANBgNVBAoTBkRla2FydDEeMBwGA1UECxMVRGF0YSBTZWN1cml0eSBTZWN0aW9u
MSUwIwYDVQQDExxEZWthcnQgQ2VydGlmaWNhdGUgQXV0aG9yaXR5MB4XDTAxMDEx
OTEyNTg0M1oXDTA2MDEwMTAwMDAwMFowgZYxCzAJBgNVBAYTAk1EMRwwGgYDVQQI
ExNSZXB1YmxpYyBvZiBNb2xkb3ZhMREwDwYDVQQHEwhLaXNoaW5ldjEPMA0GA1UE
ChMGRGVrYXJ0MR4wHAYDVQQLExVEYXRhIFNlY3VyaXR5IFNlY3Rpb24xJTAjBgNV
BAMTHERla2FydCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwggGyMIIBJwYFKw4DAgww
ggEcAoGAoHGSqek4wFY//pEkMkgWFwytylE4orNpJcElISTmauMunXTR+xB3xuEl
onvF55DKMtQUvdajwk4iGK+ZCQifvc0ugyBm58nnDbJD4zvzYj0/mK7hCdR0jaw8
niUHG0qa5+VuOeZKfiHSLXMxdgCZdq/ZvE4WcjPHjJnAXQMUNQ0CFKsFFT72U58n
DFQUvqxJB/1VA7BpAoGAnvsAU9zbao+41cL9NipcoHZx2EN04Y2LFGTIiF4EArDO
0XNtf/yZJM9h92sskChI1eQtTklvMIL2G3BQl2g6p2AfTc/voOzeTSpYe71cr+Lf
lmJsTotaUA1DqxwsuHrWNUBHMkys5UQi0KvbbVPaCXt1nNC/6Tkcu3XqyhaEgWoD
gYQAAoGANXl3TP1PSp2M4osc0fcnC6zoN6ZokDlvV6FsvGCKgC6MuM6qIfKjLBc+
WhYBF81LMDRfuLWZuau+DtQOxgLhc0Navx0yPqjjb1bumNWQO+DIFsI/fiZ01xB6
olwApZKNPgFrAAmywl/yPfi+Yjs2xzucQUIs/A45ncuthDAmEGswCQYFKw4DAg0F
AAMxADAuAhUAChYbGM1a0mpTI8lEBPFXdosoU6gCFQCQ/IVmett3mUFTF/wyO5OK
KeimNg==
-----END CERTIFICATE-----
^D
gpgsm: unknown hash algorithm `1.3.14.3.2.13'
gpgsm: selfsigned certificate has a BAD signatures
gpgsm: basic certificate checks failed - not imported
gpgsm: total number processed: 1
gpgsm: not imported: 1
I solved that problem making apache authenticate with that certificate by
recompiling Mod_SSL and setting:
int SSL_library_init(void)
{
#ifndef OPENSSL_NO_DES
EVP_add_cipher(EVP_des_cbc());
EVP_add_cipher(EVP_des_ede3_cbc());
#endif
#ifndef OPENSSL_NO_IDEA
EVP_add_cipher(EVP_idea_cbc());
#endif
#ifndef OPENSSL_NO_RC4
EVP_add_cipher(EVP_rc4());
#endif
#ifndef OPENSSL_NO_RC2
EVP_add_cipher(EVP_rc2_cbc());
#endif
#ifndef OPENSSL_NO_AES
EVP_add_cipher(EVP_aes_128_cbc());
EVP_add_cipher(EVP_aes_192_cbc());
EVP_add_cipher(EVP_aes_256_cbc());
#endif
#ifndef OPENSSL_NO_MD2
EVP_add_digest(EVP_md2());
#endif
#ifndef OPENSSL_NO_MD5
EVP_add_digest(EVP_md5());
EVP_add_digest_alias(SN_md5,"ssl2-md5");
EVP_add_digest_alias(SN_md5,"ssl3-md5");
#endif
#ifndef OPENSSL_NO_SHA
EVP_add_digest(EVP_sha1()); /* RSA with sha1 */
EVP_add_digest_alias(SN_sha1,"ssl3-sha1");
EVP_add_digest_alias(SN_sha1WithRSAEncryption,SN_sha1WithRSA);
#endif
#if !defined(OPENSSL_NO_SHA) && !defined(OPENSSL_NO_DSA)
EVP_add_digest(EVP_dss1()); /* DSA with sha1 */
EVP_add_digest_alias(SN_dsaWithSHA1,SN_dsaWithSHA1_2);
EVP_add_digest_alias(SN_dsaWithSHA1,"DSS1");
EVP_add_digest_alias(SN_dsaWithSHA1,"dss1");
#endif
/* If you want support for phased out ciphers, add the following */
#if 1 /* <<-- ***************** HERE I PUT 1 instead of 0
****************************!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
*/
EVP_add_digest(EVP_sha());
EVP_add_digest(EVP_dss());
#endif
return(1);
}
I tried to find something like this in source files of Agypten project, but
hopeless.
Anyone can help me?