Bug 1089245

Summary:	EC (elliptic curve) key generation disabled in xca
Product:	[Fedora] Fedora	Reporter:	Thomas Müller <thomas>
Component:	xca	Assignee:	Patrick Monnerat <patrick>
Status:	CLOSED ERRATA	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	20	CC:	patrick, thomas
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	xca-0.9.3-5.fc19	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2014-05-02 20:57:43 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Thomas Müller 2014-04-18 10:46:24 UTC

Description of problem:
xca as currently packaged does not offer support for EC (elliptic curve) keys, even though it is implemented upstream.


Version-Release number of selected component (if applicable):
0.9.3-4


Until recently, support for elliptic curves in openssl has been disabled in Fedora, which is probably the reason why it is also disabled in xca.
Recompiling xca against the current openssl package (with enabled EC) should fix this.

Comment 1 Patrick Monnerat 2014-04-22 13:14:07 UTC

Thanks for pointing me on this openssl change. As you have noticed, a simple rebuild enables the elliptic curves. It is currently in progress.
Is F19 concerned too? I don't have an F19 running here. Thanks in advance for your reply.

Comment 2 Fedora Update System 2014-04-22 13:39:32 UTC

xca-0.9.3-5.fc20 has been submitted as an update for Fedora 20.
https://admin.fedoraproject.org/updates/xca-0.9.3-5.fc20

Comment 3 Thomas Müller 2014-04-23 05:39:35 UTC

Yes, I just checked and Fedora 19 is in the same situation.
xca does not allow to generate EC keys even though openssl does support EC by now.

Comment 4 Patrick Monnerat 2014-04-23 08:06:39 UTC

Thanks for the info. I will rebuild xca for F19 today.

Comment 5 Fedora Update System 2014-04-24 09:32:49 UTC

xca-0.9.3-5.fc19 has been submitted as an update for Fedora 19.
https://admin.fedoraproject.org/updates/xca-0.9.3-5.fc19

Comment 6 Fedora Update System 2014-04-25 04:26:44 UTC

Package xca-0.9.3-5.fc19:
* should fix your issue,
* was pushed to the Fedora 19 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing xca-0.9.3-5.fc19'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2014-5572/xca-0.9.3-5.fc19
then log in and leave karma (feedback).

Comment 7 Fedora Update System 2014-05-01 07:05:09 UTC

xca-0.9.3-5.fc20 has been pushed to the Fedora 20 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 8 Fedora Update System 2014-05-02 20:57:43 UTC

xca-0.9.3-5.fc19 has been pushed to the Fedora 19 stable repository.  If problems still persist, please make note of it in this bug report.