{"action":"created","issue":{"url":"https://api.github.com/repos/dstucrypt/openssl-dstu/issues/2","repository_url":"https://api.github.com/repos/dstucrypt/openssl-dstu","labels_url":"https://api.github.com/repos/dstucrypt/openssl-dstu/issues/2/labels{/name}","comments_url":"https://api.github.com/repos/dstucrypt/openssl-dstu/issues/2/comments","events_url":"https://api.github.com/repos/dstucrypt/openssl-dstu/issues/2/events","html_url":"https://github.com/dstucrypt/openssl-dstu/issues/2","id":281299012,"number":2,"title":"Can't see dstu support after installing package","user":{"login":"gmile","id":207112,"avatar_url":"https://avatars2.githubusercontent.com/u/207112?v=4","gravatar_id":"","url":"https://api.github.com/users/gmile","html_url":"https://github.com/gmile","followers_url":"https://api.github.com/users/gmile/followers","following_url":"https://api.github.com/users/gmile/following{/other_user}","gists_url":"https://api.github.com/users/gmile/gists{/gist_id}","starred_url":"https://api.github.com/users/gmile/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gmile/subscriptions","organizations_url":"https://api.github.com/users/gmile/orgs","repos_url":"https://api.github.com/users/gmile/repos","events_url":"https://api.github.com/users/gmile/events{/privacy}","received_events_url":"https://api.github.com/users/gmile/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":9,"created_at":"2017-12-12T08:36:16Z","updated_at":"2017-12-28T11:36:27Z","closed_at":"2017-12-12T09:08:15Z","author_association":"NONE","body":"Hi @muromec!\r\n\r\nAfter installing [`openssl-dstu` package](https://launchpad.net/~ilya-muromec/+archive/ubuntu/openssl-dstu) on Ubuntu Trusty, openssl says there's no dstu available (very likely this is due to my limited knowledge, e.g. I'm doing something wrong).\r\n\r\nInstallation:\r\n\r\n```\r\nsudo apt-get install openssl=1.0.1f-1ubuntu2.7dstu0~trusty\r\n```\r\n\r\nUsage (`gost` is there, but neither `dstu` nor `uadstu`):\r\n\r\n```\r\nroot@899fa5af2dc2:/# openssl engine -t gost\r\n(gost) Reference implementation of GOST engine\r\n     [ available ]\r\nroot@899fa5af2dc2:/# openssl engine -t dstu\r\n140443847997088:error:25066067:DSO support routines:DLFCN_LOAD:could not load the shared library:dso_dlfcn.c:185:filename(/usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libdstu.so): /usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libdstu.so: cannot open shared object file: No such file or directory\r\n140443847997088:error:25070067:DSO support routines:DSO_load:could not load the shared library:dso_lib.c:244:\r\n140443847997088:error:260B6084:engine routines:DYNAMIC_LOAD:dso not found:eng_dyn.c:450:\r\n140443847997088:error:2606A074:engine routines:ENGINE_by_id:no such engine:eng_list.c:417:id=dstu\r\nroot@899fa5af2dc2:/# openssl engine -t uadstu\r\n140376049747616:error:25066067:DSO support routines:DLFCN_LOAD:could not load the shared library:dso_dlfcn.c:185:filename(/usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libuadstu.so): /usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libuadstu.so: cannot open shared object file: No such file or directory\r\n140376049747616:error:25070067:DSO support routines:DSO_load:could not load the shared library:dso_lib.c:244:\r\n140376049747616:error:260B6084:engine routines:DYNAMIC_LOAD:dso not found:eng_dyn.c:450:\r\n140376049747616:error:2606A074:engine routines:ENGINE_by_id:no such engine:eng_list.c:417:id=uadstu\r\nroot@899fa5af2dc2:/#\r\n```\r\n\r\nWhat am I doing wrong?"},"comment":{"url":"https://api.github.com/repos/dstucrypt/openssl-dstu/issues/comments/354275102","html_url":"https://github.com/dstucrypt/openssl-dstu/issues/2#issuecomment-354275102","issue_url":"https://api.github.com/repos/dstucrypt/openssl-dstu/issues/2","id":354275102,"user":{"login":"muromec","id":52763,"avatar_url":"https://avatars3.githubusercontent.com/u/52763?v=4","gravatar_id":"","url":"https://api.github.com/users/muromec","html_url":"https://github.com/muromec","followers_url":"https://api.github.com/users/muromec/followers","following_url":"https://api.github.com/users/muromec/following{/other_user}","gists_url":"https://api.github.com/users/muromec/gists{/gist_id}","starred_url":"https://api.github.com/users/muromec/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/muromec/subscriptions","organizations_url":"https://api.github.com/users/muromec/orgs","repos_url":"https://api.github.com/users/muromec/repos","events_url":"https://api.github.com/users/muromec/events{/privacy}","received_events_url":"https://api.github.com/users/muromec/received_events","type":"User","site_admin":false},"created_at":"2017-12-28T11:36:26Z","updated_at":"2017-12-28T11:36:26Z","author_association":"OWNER","body":"X509 of course\n\nOn Thu, Dec 28, 2017, 13:35 Ilya Petrov <ilya.muromec@gmail.com> wrote:\n\n> You are on a right path for sure. To get it fully working you need to\n> provide openssl  with full certificate chain up to CZO root because CAs,\n> such as privatbank don't use self-signed certificates themselves, but ones\n> signed by government agency.\n>\n> Try verifying certificates themselves first with x508 subcommand.\n>\n> On Thu, Dec 28, 2017, 13:09 Eugene Pirogov <notifications@github.com>\n> wrote:\n>\n>> @muromec <https://github.com/muromec> thank you, I'll take a look at\n>> dstud too!\n>>\n>> Just tried using smime utility, got this:\n>>\n>> openssl smime -verify -in my_message.txt.p7s -engine dstu -inform DER certificate.pem\n>> engine \"dstu\" set.\n>> Verification failure\n>> 140089686927008:error:21075075:PKCS7 routines:PKCS7_verify:certificate verify error:pk7_smime.c:342:Verify error:unable to get local issuer certificate\n>>\n>> Does it look like I'm on the right path? I have 4 files with certs from\n>> PrivatBank, and only picked the first one (also, converted it from DER to\n>> PEM) to try to perform signed message verification:\n>>\n>> $ ls -l PrivateCerts/\n>> total 16\n>> -rwxr-xr-x 1 root root 1414 Dec 27 13:27 CA-3004751DEF2C78AE010000000100000049000000.cer\n>> -rwxr-xr-x 1 root root 1721 Dec 27 13:27 CACMPServer-D84EDA1BB9381E8020000000100000019000000.cer\n>> -rwxr-xr-x 1 root root 1590 Dec 27 13:27 CAOCSPServer-D84EDA1BB9381E802000000010000001A000000.cer\n>> -rwxr-xr-x 1 root root 1498 Dec 27 13:27 CATSPServer-3004751DEF2C78AE02000000010000004A000000.cer\n>>\n>> —\n>> You are receiving this because you were mentioned.\n>>\n>>\n>> Reply to this email directly, view it on GitHub\n>> <https://github.com/dstucrypt/openssl-dstu/issues/2#issuecomment-354272030>,\n>> or mute the thread\n>> <https://github.com/notifications/unsubscribe-auth/AADOGzluoHww87xcTT6x5VRC5liTdTKvks5tE3b7gaJpZM4Q-mYw>\n>> .\n>>\n>\n"}}
{"actor":{"display_login":"muromec"}}