Red Hat Bugzilla – Bug 704595
lib crmf uses a hard-coded maximum size of 2048 for wrapped private keys
Last modified: 2012-11-19 07:57:19 EST
Created attachment 502875 [details] the patch from upstream Not directely applicable with RHEL 5. Will attach the modified version next.
The patch need to be adjusted as follows: +@@ -46,11 +46,46 @@ #include "secasn1.h" #include "crmfit.h" #include "secerr.h" +#include "blapit.h" ++ ++/* RSA_MAX_MODULUS_BITS is not defined in older versions ++ * of blapit.h such as the one from nss 3.11.5 ++ */ ++#ifndef RSA_MAX_MODULUS_BITS ++#define RSA_MAX_MODULUS_BITS 8192 ++#endif ++#define MAX_WRAPPED_KEY_LEN RSA_MAX_MODULUS_BITS
Created attachment 502878 [details] patch ajusted for RHEL 5 to add for the missing macro definition if needed
Comment on attachment 502878 [details] patch ajusted for RHEL 5 to add for the missing macro definition if needed r+ since it the same patch I r+ upstream;). bob
*** Bug 757917 has been marked as a duplicate of this bug. ***
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHBA-2012-0291.html