Bug 2467677 - RSA.xs:983: OpenSSL error: illegal or unsupported padding mode
Summary: RSA.xs:983: OpenSSL error: illegal or unsupported padding mode
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: perl-Crypt-OpenSSL-RSA
Version: 44
Hardware: Unspecified
OS: Linux
unspecified
medium
Target Milestone: ---
Assignee: Xavier Bachelot
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-05-07 10:50 UTC by Ronald Wahl
Modified: 2026-05-12 00:49 UTC (History)
3 users (show)

Fixed In Version: perl-Crypt-OpenSSL-RSA-0.41-1.fc44
Clone Of:
Environment:
Last Closed: 2026-05-12 00:49:12 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Ronald Wahl 2026-05-07 10:50:40 UTC
We use Crypt::OpenSSL::RSA for code signing which is currently version 0.37. On Fedora 44 we now get this error:

RSA.xs:983: OpenSSL error: illegal or unsupported padding mode

Looking at https://metacpan.org/dist/Crypt-OpenSSL-RSA/changes newer version may have fixed this. I already see build of version 0.41 for rawhide so maybe we can use it in F44 as well?

Reproducible: Always

Comment 1 Xavier Bachelot 2026-05-07 13:54:20 UTC
Could you please try packages from this scratch build ?

https://koji.fedoraproject.org/koji/taskinfo?taskID=145219014

Comment 2 Ronald Wahl 2026-05-07 14:42:39 UTC
With that build the error message is gone.

Comment 3 Ronald Wahl 2026-05-07 14:54:41 UTC
But the generated signature is bad. Not sure yet if I need to change something when generating the signature.

Comment 4 Ronald Wahl 2026-05-07 15:06:23 UTC
I got it working. I now need to set the padding mode explicitly before signing otherwise some default is set that in my case was likely different then before.

Comment 5 Ronald Wahl 2026-05-07 15:27:02 UTC
For completeness I also checked setting the padding mode for the old version 0.37 of this package but unfortunately the PKCS#1 v1.5 padding mode was disabled for signing before version 0.38. So the update is required.

Comment 6 Fedora Update System 2026-05-09 21:31:27 UTC
FEDORA-2026-62771eb074 (perl-Crypt-OpenSSL-RSA-0.41-1.fc44) has been submitted as an update to Fedora 44.
https://bodhi.fedoraproject.org/updates/FEDORA-2026-62771eb074

Comment 7 Fedora Update System 2026-05-10 04:06:27 UTC
FEDORA-2026-62771eb074 has been pushed to the Fedora 44 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-62771eb074`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-62771eb074

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 8 Fedora Update System 2026-05-12 00:49:12 UTC
FEDORA-2026-62771eb074 (perl-Crypt-OpenSSL-RSA-0.41-1.fc44) has been pushed to the Fedora 44 stable repository.
If problem still persists, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.