[Bug 67675] Tomcat and/or Java do not read encrypted private keys with DES-EDE3-CBC generated by openssl-req(1)

2023-12-14 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=67675 --- Comment #30 from Christopher Schultz --- (In reply to Michael Osipov from comment #28) > (In reply to Christopher Schultz from comment #27) > > The issue is not whether or not anyone is still using OpenSSL 1.0.2 today, > > but whether or no

[Bug 67675] Tomcat and/or Java do not read encrypted private keys with DES-EDE3-CBC generated by openssl-req(1)

2023-12-14 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=67675 Mark Thomas changed: What|Removed |Added Resolution|--- |FIXED Status|REOPENED

(tomcat) branch 8.5.x updated: Correct regression in fix for BZ 67675 - allow for default PRF

2023-12-14 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new 55d2fa3150 Correct regression in fix for BZ 67675 -

(tomcat) branch 9.0.x updated: Correct regression in fix for BZ 67675 - allow for default PRF

2023-12-14 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new f3eee8e28c Correct regression in fix for BZ 67675 -

(tomcat) branch 10.1.x updated: Correct regression in fix for BZ 67675 - allow for default PRF

2023-12-14 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.1.x by this push: new dd0689c911 Correct regression in fix for BZ 67675

(tomcat) branch main updated: Correct regression in fix for BZ 67675 - allow for default PRF

2023-12-14 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new e8d5ac173d Correct regression in fix for BZ 67675 - a

[Bug 67675] Tomcat and/or Java do not read encrypted private keys with DES-EDE3-CBC generated by openssl-req(1)

2023-12-14 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=67675 --- Comment #28 from Michael Osipov --- (In reply to Christopher Schultz from comment #27) > (In reply to Mark Thomas from comment #23) > > While 1.0.2 has been EOL for a while it would not surprise me at all to find > > lots of 1.0.2 generated

[Bug 67675] Tomcat and/or Java do not read encrypted private keys with DES-EDE3-CBC generated by openssl-req(1)

2023-12-14 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=67675 --- Comment #27 from Christopher Schultz --- (In reply to Mark Thomas from comment #23) > While 1.0.2 has been EOL for a while it would not surprise me at all to find > lots of 1.0.2 generated keys and certs still in use. +1 The issue is not

[Bug 67675] Tomcat and/or Java do not read encrypted private keys with DES-EDE3-CBC generated by openssl-req(1)

2023-12-14 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=67675 --- Comment #26 from Mark Thomas --- Yes, this should be fixed for the next release round which is currently scheduled for January. -- You are receiving this mail because: You are the assignee for the bug.

[Bug 67675] Tomcat and/or Java do not read encrypted private keys with DES-EDE3-CBC generated by openssl-req(1)

2023-12-14 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=67675 --- Comment #25 from Garo --- That was fast! Does this mean that it will be fixed in an upcoming release? By the way, thank you for being so responsive and reproducing this so quickly. (In reply to Mark Thomas from comment #24) > Confirmed. It

[Bug 67675] Tomcat and/or Java do not read encrypted private keys with DES-EDE3-CBC generated by openssl-req(1)

2023-12-14 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=67675 --- Comment #24 from Mark Thomas --- Confirmed. It is a regression. OpenSSL 1.0.2 doesn't specify the PRF so the default should apply. -- You are receiving this mail because: You are the assignee for the bug. -

(tomcat) 01/02: Sync OpenSSL jextract

2023-12-14 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 4e9d600d38f1f59826aeb0edaba299be1109f9ad Author: remm AuthorDate: Thu Dec 14 11:11:07 2023 +0100 Sync OpenSSL jextract

(tomcat) 02/02: Sync cleanups

2023-12-14 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit c73e6335f39c0d5de73fdd28a69b8699ed109941 Author: remm AuthorDate: Thu Dec 14 11:13:45 2023 +0100 Sync cleanups --- ..

(tomcat) branch 9.0.x updated (29323ed485 -> c73e6335f3)

2023-12-14 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a change to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git from 29323ed485 Improve verify-release new 4e9d600d38 Sync OpenSSL jextract new c73e6335f3 Sync cleanups The 2 revi

(tomcat) 01/02: Sync OpenSSL jextract

2023-12-14 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit c04f072339e94e9b0ee16b2fe704fbd409daeea7 Author: remm AuthorDate: Thu Dec 14 11:11:07 2023 +0100 Sync OpenSSL jextrac

(tomcat) 02/02: Sync cleanups

2023-12-14 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 625f3c166b46f00661e7a6ac4f0a95c485962ffe Author: remm AuthorDate: Thu Dec 14 11:13:45 2023 +0100 Sync cleanups --- .

(tomcat) branch 10.1.x updated (488934245b -> 625f3c166b)

2023-12-14 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a change to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git from 488934245b Add release date for 10.1.17. new c04f072339 Sync OpenSSL jextract new 625f3c166b Sync cleanups Th

(tomcat) branch main updated: Sync cleanups

2023-12-14 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 8569361da2 Sync cleanups 8569361da2 is described below

(tomcat) branch main updated: Sync OpenSSL jextract

2023-12-14 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 601586edd7 Sync OpenSSL jextract 601586edd7 is describ

[Bug 67675] Tomcat and/or Java do not read encrypted private keys with DES-EDE3-CBC generated by openssl-req(1)

2023-12-14 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=67675 --- Comment #23 from Mark Thomas --- Tomcat ships OpenSSL binaries are part of the Tomcat Native distribution. I need to go back a bit but we have 1.0.2 binaries. For now, this looks like a regression so I'm happy handling it here. While 1.0.

[Bug 67675] Tomcat and/or Java do not read encrypted private keys with DES-EDE3-CBC generated by openssl-req(1)

2023-12-14 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=67675 --- Comment #22 from ggar --- (In reply to Mark Thomas from comment #21) > The algorithm is being read as the pseudo random function and failing. > > I need to see if I can find (or build) an OpenSSL 1.0.2 binary. Mark, there are several link