From: "MartinBosslet (Martin Bosslet)" <Martin.Bosslet@...>
Date: 2012-08-29T04:20:27+09:00
Subject: [ruby-core:47352] [ruby-trunk - Bug #6939][Assigned] Uninformative exception in FIPS mode


Issue #6939 has been updated by MartinBosslet (Martin Bosslet).

Status changed from Open to Assigned


----------------------------------------
Bug #6939: Uninformative exception in FIPS mode
https://bugs.ruby-lang.org/issues/6939#change-29087

Author: vo.x (Vit Ondruch)
Status: Assigned
Priority: Normal
Assignee: MartinBosslet (Martin Bosslet)
Category: 
Target version: 
ruby -v: trunk


# cat /proc/sys/crypto/fips_enabled
1
]# irb
irb(main):001:0> require 'openssl'
=> true
irb(main):002:0> OpenSSL::PKey::DH.new(1024)
=> -----BEGIN DH PARAMETERS-----
MIGHAoGBAMjWrD9U8wfqxMEMPBaBnihhTJb6CGgy7Auy1Aark27nFER3RuYY4ZXC
2lZ11/mDhyymW/LPNr8cupYgs5AsZttguT/zhpr6j2sobnjkcvj8T6FkQ42TC4Dw
PS+O+Mdvz1BP8ZUWXV8QBxyxCKCanPVWvPGI8tC5amj9QM66VyUTAgEC
-----END DH PARAMETERS-----

irb(main):003:0> OpenSSL::PKey::DH.new(128)
OpenSSL::PKey::DHError: BN lib
	from (irb):3:in `initialize'
	from (irb):3:in `new'
	from (irb):3
	from /bin/irb:12:in `<main>'
irb(main):004:0> 


Could you please provide better exception message? While it is fine that DH.new fails with short key, it is not obvious from the message what is the reason. Thank you.


-- 
http://bugs.ruby-lang.org/