[ruby-core:74371] [Ruby trunk Bug#12162][Assigned] OpenSSL::PKCS7 seems to create broken objects (nested asn.1 error)

Issue #12162 has been updated by Shyouhei Urabe.

Status changed from Open to Assigned
Assignee set to openssl

----------------------------------------
Bug #12162: OpenSSL::PKCS7 seems to create broken objects (nested asn.1 error)
https://bugs.ruby-lang.org/issues/12162#change-57491

* Author: JarosナＢw Gテウrny
* Status: Assigned
* Priority: Normal
* Assignee: openssl
* ruby -v: ruby 2.3.0p0 (2015-12-25 revision 53290) [x86_64-darwin15]
* Backport: 2.1: UNKNOWN, 2.2: UNKNOWN, 2.3: UNKNOWN
----------------------------------------
When trying to read previously created OpenSSL::PKCS7 object, it fails with 'nested asn.1 error'. Seems like object is broken.


Steps to reproduce:

1. Generate x.509 certificate (either from CLI or in Ruby) and store it in OpenSSL::X509::Certificate object.
2. Create new OpenSSL::PKCS7 object, set the 'type' attribute to ':signed'
3. Add OpenSSL::X509::Certificate object to OpenSSL::PKCS7 object with #add_certificate() method
4. Try to read back the object created in step '3' with: OpenSSL::PKCS7.new(pkcs7_obj.to_s)


Result:

ArgumentError: Could not parse the PKCS7: nested asn1 error
from (pry):8:in `initialize'


Expected result:
OpenSSL::PKCS7.new() should be able to read from previously created PKCS7 object (casted to string with #to_s method)


The session is attached to this ticket. It can be also found online: https://gist.github.com/jnahorny/9ccbb186c9f7c20c9f3e

note 1: I was able to reproduce this problem with ruby 2.2.x and latest head (2.4.0). On Linux too.
note 2: This code used to work when ruby was linked to openssl v 0.9.8.

---Files--------------------------------
gistfile1.txt (4.35 KB)


-- 
https://bugs.ruby-lang.org/

Unsubscribe: <mailto:[e-mail]?subject=unsubscribe>
<http://lists.ruby-lang.org/cgi-bin/mailman/options/ruby-core>