OpenSSL and certificate problems on GoFlex Home

This forum is for topics dealing with problems with software specifically in the ARMv5 repo.

OpenSSL and certificate problems on GoFlex Home

Postby beausoleil » Fri Dec 06, 2013 2:26 am

I saw someone else is having this problem with hardware crypto acceleration.

In general, it seems to work - I get vast improvements in performance while testing (e.g. openssl speed -elapsed -evp aes-128-cbc). But it seems to have caused some downstream problems.

But now webmin is broken as well. It was working after I installed the hardware crypto support, but when I changed webmin userid authentication to mirror the Linux userid, it failed. The error was because it was expecting to find the perl module Authen::PAM, but it wasn't installed. Thus began a down-the-rabbit-hole venture like Alice...

It seemed I needed to install the perl-authen-pam module, which for ARM seems to be only available in AUR. So when I tried to download it using wget, I got the following error:
$this->bbcode_second_pass_code('', '[jon@goflexhome tmp]$ sudo wget https://aur.archlinux.org/packages/pe/perl-authen-pam/perl-authen-pam.tar.gz
--2013-12-05 19:10:30-- https://aur.archlinux.org/packages/pe/perl-authen-pam/perl-authen-pam.tar.gz
Resolving aur.archlinux.org (aur.archlinux.org)... 2a01:4f8:120:34c2::2, 78.46.78.247
Connecting to aur.archlinux.org (aur.archlinux.org)|2a01:4f8:120:34c2::2|:443... connected.
OpenSSL: error:0606C06E:digital envelope routines:EVP_VerifyFinal:wrong public key type
OpenSSL: error:1408D07B:SSL routines:SSL3_GET_KEY_EXCHANGE:bad signature
Unable to establish SSL connection.')
I downloaded the tar package from another computer running Linux Mint 15, and then scp'd it over to the GoFlex. When I tried to build the package, I kept getting an error when prompted for the root password:
$this->bbcode_second_pass_code('', '---- Now, you may be prompted to enter the password of 'root'.
Password:
not ok 9 (7 - Authentication failure)
---- The failure of test 9 could be due to your PAM configuration
---- or typing an incorrect password.
ok 10
ok 11
')
I double and triple checked the password, so how do I check the PAM config to find the error?

I realize the two problems may not be related (broken webmin and broken SSL support for wget), but if they aren't, then at least one led me to finding out I had the other problem as well.
beausoleil
 
Posts: 4
Joined: Tue Oct 29, 2013 5:00 pm

Re: OpenSSL and certificate problems on GoFlex Home

Postby WarheadsSE » Fri Dec 06, 2013 4:12 am

At this point in time, I would disable the cryptodev set, and use the non-mv_cesa accelerated packages. The performance has been optimized with assembler in recent releases.
Core Developer
Remember: Arch Linux ARM is entirely community donation supported!
WarheadsSE
Developer
 
Posts: 6807
Joined: Mon Oct 18, 2010 2:12 pm


Return to ARMv5

Who is online

Users browsing this forum: No registered users and 4 guests