Bug 1708

Summary: globus_ftp_control: gss_init_sec_context failed on AIX 5.1
Product: GSI C Reporter: Jason Alt <jalt@ncsa.uiuc.edu>
Component: AuthenticationAssignee: Sam Meder <meder@mcs.anl.gov>
Status: RESOLVED FIXED    
Severity: normal CC: slang@mcs.anl.gov, vwelch@uiuc.edu
Priority: P2    
Version: 3.2beta   
Target Milestone: ---   
Hardware: RS/6000   
OS: AIX   
Bug Depends on:    
Bug Blocks: 1711    
Attachments: Fix for 64bit openssl config problem
Configuration from upstream openssl-0.9.7c

Description From 2004-04-20 14:37:47 
Flavor vendorcc64dbg

patches:
  globus_common-4.10.tar.gz
  globus_core-3.11.tar.gz
  globus_io-5.3.tar.gz
  globus_xio-0.6.tar.gz

I found this with uberftp, but it is reproducible on AIX with globus-url-copy:

bash-2.05a$ globus-url-copy file:/etc/passwd 
gsiftp://mss.ncsa.uiuc.edu/u/ac/jalt/file

error: globus_ftp_control: gss_init_sec_context failed
OpenSSL Error: rsa_pk1.c:100: in library: rsa routines, function 
RSA_padding_check_PKCS1_type_1: block type is not 01

bash-2.05a$ grid-proxy-info
subject  : /C=US/O=National Computational Science Alliance/CN=Jason 
Alt/CN=proxy
issuer   : /C=US/O=National Computational Science Alliance/CN=Jason Alt
type     : full
strength : 512 bits
path     : /tmp/x509up_u27751
timeleft : 115:53:49  (4.8 days)

bash-2.05a$ which globus-url-copy
/scratch/jalt/globus-3.2-dbg/bin/globus-url-copy
bash-2.05a$ which grid-proxy-info
/usr/local/globus/bin/grid-proxy-info

Or against globus gridftp service:

bash-2.05a$ globus-url-copy file:/etc/passwd gsiftp://tg-
tts1.ncsa.teragrid.org/home/jalt/file

error: globus_ftp_control: gss_init_sec_context failed
OpenSSL Error: rsa_pk1.c:100: in library: rsa routines, function 
RSA_padding_check_PKCS1_type_1: block type is not 01
------- Comment #1 From 2004-04-20 17:34:52 ------- 
Created an attachment (id=365) [details]
Fix for 64bit openssl config problem

globus_openssl did not configure right for 64bits on AIX. I have attached a
small fix for this. 'make test' passes all tests, and globusrun -a works
against a remote Linux machine.

Sam, can you take a look to see if we need anything else? I'll attach
opensslconf.h from openssl-0.9.7c (which also passes 'make test') to see if we
are missing something else.
------- Comment #2 From 2004-04-20 17:35:43 ------- 
Created an attachment (id=366) [details]
Configuration from upstream openssl-0.9.7c
------- Comment #3 From 2004-04-21 08:36:11 ------- 
This did the trick. Thanks
------- Comment #4 From 2004-05-11 16:28:50 ------- 
Update package is now available on advisories page.

/Sam