[openssl.org #2077] openssl 1.0.0 stable does not print all digests with help

[Misha Aizatulin via RT]

Hi,
I checked with a recent snapshot 1.0.0-stable, and found that although
the openssl commandline supports now sha224, sha256, sha384, and sha512
message digests, it still only prints these:

Message Digest commands (see the `dgst' command for more details)
md4               md5               mdc2              rmd160
sha               sha1

but 'openssl dgst x' gives:
-gost-mac       to use the gost-mac message digest algorithm
-md_gost94      to use the md_gost94 message digest algorithm
-md4            to use the md4 message digest algorithm
-md5            to use the md5 message digest algorithm
-mdc2           to use the mdc2 message digest algorithm
-ripemd160      to use the ripemd160 message digest algorithm
-sha            to use the sha message digest algorithm
-sha1           to use the sha1 message digest algorithm
-sha224         to use the sha224 message digest algorithm
-sha256         to use the sha256 message digest algorithm
-sha384         to use the sha384 message digest algorithm
-sha512         to use the sha512 message digest algorithm
-whirlpool      to use the whirlpool message digest algorithm

so seems there are a couple of digests missing ...

BTW. is there a right way to get help from openssl commandline instead
of just producing an error?

thanks, Günter.


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev@...
Automated List Manager                           majordomo@...

[Victor B. Wagner]

On 2009.10.25 at 00:05:36 +0200, Guenter via RT wrote:

> Hi,
> I checked with a recent snapshot 1.0.0-stable, and found that although
> the openssl commandline supports now sha224, sha256, sha384, and sha512
> message digests, it still only prints these:
>
> Message Digest commands (see the `dgst' command for more details)
> md4               md5               mdc2              rmd160
> sha               sha1

Really, there is a problem with digest commands. For instance I never
was able to make md_gost94 digest work as digest command, not as option
to dgst command.

Problem is that command name parsing occurs before initialization of
OpenSSL  is completed and configuration file read.
So, engine-provided algorithms at least, cannot
be used as digest command.

dgst command prints list of available digests after all inititalization,
so it sees them all.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev@...
Automated List Manager                           majordomo@...

[Guenter-5]

Hi Victor,
> Really, there is a problem with digest commands. For instance I never
> was able to make md_gost94 digest work as digest command, not as option
> to dgst command.
works for me (1.0.0-stable snapshot); it seems the syntax is:
openssl dgst -<digest> file
or
openssl <digest> file
f.e.:
./openssl md_gost94 openssl
md_gost94(openssl)=
1f4e2ca3d0ef0bbf54528acad3d462205dfef7056e389a37d28b2e22649a1f70
or:
./openssl dgst -md_gost94 openssl
md_gost94(openssl)=
1f4e2ca3d0ef0bbf54528acad3d462205dfef7056e389a37d28b2e22649a1f70

but:
./openssl dgst command
command: No such file or directory

so seems without a valid digest parameter openssl directly looks for a
file, and uses md5 digest:
./openssl dgst openssl
MD5(openssl)= dfb6bf0c6d61643e06e3c48a1573d4b9

Günter.


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev@...
Automated List Manager                           majordomo@...