[asterisk-bugs] [JIRA] (ASTERISK-30343) res_crypto: ast_sign_bin fails

[George Joseph (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-30343?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=260889#comment-260889 ] 

George Joseph edited comment on ASTERISK-30343 at 12/13/22 9:50 AM:
--------------------------------------------------------------------

I can't seem to reproduce this between Fedora 37 (openssl 3.0.5 5) and CentOS 7 (openssl 1.0.2k-fips) on any version of Asterisk.  Can you provide a sample dundi.conf and a set of SAMPLE keys that reproduces the issue?  What version of openssl are you running?  Can you give me the exact commands you used to generate your keys?

Oh, does a simple {{dundi lookup 123456}} from the CLI cause the issue?



was (Author: gtj):
I can't seem to reproduce this between Fedora 37 (openssl 3.0.5 5) and CentOS 7 (openssl 1.0.2k-fips) on any version of Asterisk.  Can you provide a sample dundi.conf and a set of SAMPLE keys that reproduces the issue?  What version of openssl are you running?  Can you give me the exact commands you used to generate your keys?



> res_crypto: ast_sign_bin fails
> ------------------------------
>
>                 Key: ASTERISK-30343
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-30343
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Resources/res_crypto
>    Affects Versions: 16.29.0, 18.15.1, 20.0.1
>         Environment: Alma Linux 9.1
>            Reporter: Michael Newton
>            Assignee: Michael Newton
>            Severity: Major
>
> After upgrade from 16.28 to 16.29 our dundi queries stopped working with this error output:
> {noformat}
> WARNING[100840]: res_crypto.c:384 ast_sign_bin: RSA Signature (key gateway) failed -1
> NOTICE[100840]: pbx_dundi.c:1366 update_key: Failed to sign key (-1)!
> NOTICE[100840]: pbx_dundi.c:3376 dundi_send: Failed to send packet to '00:50:56:ae:13:23'
> {noformat}
> This appears to be a regression resulting from changes in ASTERISK-30046.



--
This message was sent by Atlassian JIRA
(v6.2#6252)