From: "mame (Yusuke Endoh)" Date: 2013-02-18T21:23:23+09:00 Subject: [ruby-core:52444] [ruby-trunk - Bug #5600] OpenSSL::X509::Request can't sign() an OpenSSL::PKey::EC Issue #5600 has been updated by mame (Yusuke Endoh). Subject changed from OpenSSL::X509::Request can't sign() an OpenSSL::PKey::EC to OpenSSL::X509::Request can't sign() an OpenSSL::PKey::EC Target version changed from 2.0.0 to next minor It is too late for "an overhaul". Postponing to next minor. -- Yusuke Endoh ---------------------------------------- Bug #5600: OpenSSL::X509::Request can't sign() an OpenSSL::PKey::EC https://bugs.ruby-lang.org/issues/5600#change-36510 Author: scaligo (Steve Caligo) Status: Assigned Priority: Normal Assignee: MartinBosslet (Martin Bosslet) Category: ext Target version: next minor ruby -v: ruby 1.9.3p0 (2011-10-30 revision 33570) [x86_64-linux] Unlike the PKey::DSA and PKey::RSA classes, PKey::EC provides a private_key?() rather than private?() method and is thus incompatible with the other OpenSSL classes that rely on them, i.e. it makes impossible to generate a certificate signing request: key = OpenSSL::PKey::EC.new('secp521r1') key.generate_key req = OpenSSL::X509::Request.new req.public_key = key req.subject = OpenSSL::X509::Name.parse('CN=whatever') req.sign(key, OpenSSL::Digest::SHA384.new) which produces the error: in `sign': undefined method `private?' for # (NoMethodError) ossl_pkey_ec.c should either: - rb_define_method() the missing private? and public? methods - rename public_key? to public? and private_key? to private? Judging by the source code, this should be present in branch 1.8 as well. -- http://bugs.ruby-lang.org/