JRuby

PKCS7#sign failed for DES3 cipher algorithm

Details

  • Type: Bug Bug
  • Status: Closed Closed
  • Priority: Major Major
  • Resolution: Fixed
  • Affects Version/s: JRuby-OpenSSL 0.6
  • Fix Version/s: JRuby-OpenSSL 0.7
  • Component/s: OpenSSL
  • Labels:
    None
  • Number of attachments :
    0

Description

(Direct mail from an user)

I'm using XXX under ruby MRI but I can't do the same under jruby_openssl because it doesn't support DES3 cipher algorithm.

Example using jirb:

require "openssl"
=> true
OpenSSL::Cipher::Cipher::new("DES3")
LoadError: unsupported cipher algorithm (DES3/CBC/PKCS5Padding)
from (irb):3

Do you know if/how can I use XXX under jruby (using DES3 cipher algorithm ?)

Activity

Ascending order - Click to sort in descending order
Hide
Permalink
Hiroshi Nakamura added a comment -

Must be a bug of jruby-openssl.

And for a workaround, use "des-ede3-cbc" as an algorithm.
OpenSSL::Cipher::Cipher.new("des-ede3-cbc")

Let me know if it doesn't work. "DES3" is an alias of "DES-EDE3-CBC"
in OpenSSL world but the service you're using may use "DES3' as
another parameter combination.

Show
Hiroshi Nakamura added a comment - Must be a bug of jruby-openssl. And for a workaround, use "des-ede3-cbc" as an algorithm. OpenSSL::Cipher::Cipher.new("des-ede3-cbc") Let me know if it doesn't work. "DES3" is an alias of "DES-EDE3-CBC" in OpenSSL world but the service you're using may use "DES3' as another parameter combination.
Hide
Permalink
Hiroshi Nakamura added a comment -

(Direct mail from the user)

I'd try to put the workaround into my code changing from DES3 to des-ede3-cbc and the cipher object now is created but calling for encription it doesn't work:

my code:

signed = OpenSSL::PKCS7::sign(OpenSSL::X509::Certificate.new(APP_CERT_PEM), OpenSSL::PKey::RSA.new(APP_KEY_PEM, ''), values.map { |k, v| "#{k}=#{v}" }.join("\n"), [], OpenSSL::PKCS7::BINARY)

OpenSSL::PKCS7::encrypt([OpenSSL::X509::Certificate.new(PAYPAL_CERT_PEM)], signed.to_der, OpenSSL::Cipher::Cipher::new("des-ede3-cbc"), OpenSSL::PKCS7::BINARY).to_s.gsub("\n", "")

exception:

org.jruby.ext.openssl.impl.PKCS7Exception: PKCS7[Method: -1, Reason: -1, Data: Couldn't find algorithm DESede/cbc/PKCS5Padding. Tried: DESede-192-cbc]
    at org.jruby.ext.openssl.impl.PKCS7.dataInit(PKCS7.java:900)
    at org.jruby.ext.openssl.impl.PKCS7.encrypt(PKCS7.java:467)
    at org.jruby.ext.openssl.PKCS7$ModuleMethods.encrypt(PKCS7.java:232)
    at org.jruby.ext.openssl.PKCS7$ModuleMethods$s_method_0_0$RUBYINVOKER$encrypt.call(org/jruby/ext/openssl/PKCS7$ModuleMethods$s_method_0_0$RUBYINVOKER$encrypt.gen)
...

Under ruby MRI it works...

Show
Hiroshi Nakamura added a comment - (Direct mail from the user) I'd try to put the workaround into my code changing from DES3 to des-ede3-cbc and the cipher object now is created but calling for encription it doesn't work: my code: signed = OpenSSL::PKCS7::sign(OpenSSL::X509::Certificate. new (APP_CERT_PEM), OpenSSL::PKey::RSA. new (APP_KEY_PEM, ''), values.map { |k, v| "#{k}=#{v}" }.join( "\n" ), [], OpenSSL::PKCS7::BINARY) OpenSSL::PKCS7::encrypt([OpenSSL::X509::Certificate. new (PAYPAL_CERT_PEM)], signed.to_der, OpenSSL::Cipher::Cipher:: new ( "des-ede3-cbc" ), OpenSSL::PKCS7::BINARY).to_s.gsub( "\n" , "") exception: org.jruby.ext.openssl.impl.PKCS7Exception: PKCS7[Method: -1, Reason: -1, Data: Couldn't find algorithm DESede/cbc/PKCS5Padding. Tried: DESede-192-cbc] at org.jruby.ext.openssl.impl.PKCS7.dataInit(PKCS7.java:900) at org.jruby.ext.openssl.impl.PKCS7.encrypt(PKCS7.java:467) at org.jruby.ext.openssl.PKCS7$ModuleMethods.encrypt(PKCS7.java:232) at org.jruby.ext.openssl.PKCS7$ModuleMethods$s_method_0_0$RUBYINVOKER$encrypt.call(org/jruby/ext/openssl/PKCS7$ModuleMethods$s_method_0_0$RUBYINVOKER$encrypt.gen) ... Under ruby MRI it works...
Hide
Permalink
Hiroshi Nakamura added a comment -

Fixed in 8eacb2d9892650b524949e4d1def0453a11a0edd

Show
Hiroshi Nakamura added a comment - Fixed in 8eacb2d9892650b524949e4d1def0453a11a0edd

People

  • Assignee:
    Hiroshi Nakamura
    Reporter:
    Hiroshi Nakamura
Vote (0)
Watch (0)

Dates

  • Created:
    Updated:
    Resolved: