[erlang-questions] Support for ECDSA + SHA256 certificates?

Biiiipy biiiipy@REDACTED
Fri Nov 20 10:34:38 CET 2015


Hello!

I'm using RabbitMQ and I'm having problems with using ECDSA + SHA256
certificates.
Is it not supported?

Working:
ECDSA+SHA1; RSA+SHA1; RSA+SHA256

*Not Working:*
ECDSA+SHA256

Running rabbitmq 3.5.6, erlang r18.1, windows 7/linux mint. Certs generated
with openssl 1.0.1f and 1.0.2d.

Crash Log:

** Reason for termination =

** {function_clause,

       [{public_key,sign,

            [{digest,


 <<57,64,231,69,138,82,239,218,169,237,223,217,16,61,160,220,

                   38,83,122,74,96,74,92,46,235,162,222,157,233,111,207,245,


 237,166,225,110,42,139,85,177,43,201,68,255,30,213,34,130,


 253,247,193,2,46,47,152,212,60,82,211,243,9,70,247,136>>},

             sha512,

             {'PrivateKeyInfo',v1,

                 {'PrivateKeyInfo_privateKeyAlgorithm',

                     {1,2,840,10045,2,1},

                     {asn1_OPENTYPE,<<6,5,43,129,4,0,34>>}},


 <<48,129,155,2,1,1,4,48,237,83,11,120,206,206,60,186,204,57,

                   67,34,207,48,160,53,106,128,99,184,234,248,246,226,38,18,

                   224,179,13,181,132,114,19,60,30,120,156,126,72,62,95,230,


 102,28,152,71,84,22,161,100,3,98,0,4,240,84,45,30,54,167,65,


 215,99,151,193,226,179,244,90,187,157,21,201,191,106,28,196,


 5,69,246,127,70,247,120,180,66,179,61,88,156,98,238,168,12,


 110,114,192,137,183,45,106,177,200,173,116,41,191,190,203,


 108,166,91,239,129,27,203,165,160,126,165,9,156,158,145,81,

                   28,57,88,38,236,146,11,76,38,61,178,65,245,62,52,7,20,26,

                   123,198,154,162,221,231,2>>,

                 asn1_NOVALUE}],

            [{file,"public_key.erl"},{line,441}]},

        {ssl_handshake,enc_server_key_exchange,6,

            [{file,"ssl_handshake.erl"},{line,846}]},

        {ssl_connection,key_exchange,2,

            [{file,"ssl_connection.erl"},{line,1245}]},

        {ssl_connection,server_certify_and_key_exchange,2,

            [{file,"ssl_connection.erl"},{line,1142}]},

        {ssl_connection,new_server_hello,3,

            [{file,"ssl_connection.erl"},{line,1015}]},


{tls_connection,next_state,4,[{file,"tls_connection.erl"},{line,466}]},

        {gen_fsm,handle_msg,7,[{file,"gen_fsm.erl"},{line,518}]},

        {proc_lib,init_p_do_apply,3,[{file,"proc_lib.erl"},{line,240}]}]}


=ERROR REPORT==== 16-Nov-2015::14:07:40 ===

    application: mochiweb

    "Accept failed error"

    "{'EXIT',\n    {{function_clause,\n         [{public_key,sign,\n
       [{digest,\n
<<57,64,231,69,138,82,239,218,169,237,223,217,16,61,160,\n
    220,38,83,122,74,96,74,92,46,235,162,222,157,233,111,207,\n
        245,237,166,225,110,42,139,85,177,43,201,68,255,30,213,\n
          34,130,253,247,193,2,46,47,152,212,60,82,211,243,9,70,\n
            247,136>>},\n               sha512,\n
{'PrivateKeyInfo',v1,\n
{'PrivateKeyInfo_privateKeyAlgorithm',\n
{1,2,840,10045,2,1},\n
{asn1_OPENTYPE,<<6,5,43,129,4,0,34>>}},\n
<<48,129,155,2,1,1,4,48,237,83,11,120,206,206,60,186,204,57,\n
        67,34,207,48,160,53,106,128,99,184,234,248,246,226,38,18,\n
            224,179,13,181,132,114,19,60,30,120,156,126,72,62,95,230,\n
                102,28,152,71,84,22,161,100,3,98,0,4,240,84,45,30,54,167,\n

65,215,99,151,193,226,179,244,90,187,157,21,201,191,106,\n
    28,196,5,69,246,127,70,247,120,180,66,179,61,88,156,98,\n
      238,168,12,110,114,192,137,183,45,106,177,200,173,116,41,\n
          191,190,203,108,166,91,239,129,27,203,165,160,126,165,9,\n
              156,158,145,81,28,57,88,38,236,146,11,76,38,61,178,65,245,\n
                    62,52,7,20,26,123,198,154,162,221,231,2>>,\n
        asn1_NOVALUE}],\n
 [{file,\"public_key.erl\"},{line,441}]},\n
 {ssl_handshake,enc_server_key_exchange,6,\n
 [{file,\"ssl_handshake.erl\"},{line,846}]},\n
 {ssl_connection,key_exchange,2,\n
 [{file,\"ssl_connection.erl\"},{line,1245}]},\n
 {ssl_connection,server_certify_and_key_exchange,2,\n
 [{file,\"ssl_connection.erl\"},{line,1142}]},\n
 {ssl_connection,new_server_hello,3,\n
 [{file,\"ssl_connection.erl\"},{line,1015}]},\n
 {tls_connection,next_state,4,\n
 [{file,\"tls_connection.erl\"},{line,466}]},\n
 {gen_fsm,handle_msg,7,[{file,\"gen_fsm.erl\"},{line,518}]},\n
 {proc_lib,init_p_do_apply,3,[{file,\"proc_lib.erl\"},{line,240}]}]},\n
{gen_fsm,sync_send_all_state_event,\n
[<0.533.0>,{start,infinity},infinity]}}}"
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://erlang.org/pipermail/erlang-questions/attachments/20151120/30e849d0/attachment.htm>


More information about the erlang-questions mailing list