Bug #863: dcmtls error related to elliptic curves on RHEL 7.6 - DCMTK - OFFIS DCMTK and DICOM Projects

Actions

Copy link

Bug #863

closed

dcmtls error related to elliptic curves on RHEL 7.6

Added by Marco Eichelberg over 6 years ago. Updated over 6 years ago.

Status:

Closed

Priority:

Normal

Assignee:

Marco Eichelberg

Category:

Library and Apps

Target version:

3.6.5

Start date:

2018-12-13

Due date:

% Done:

100%

Estimated time:

Module:

dcmtls

Operating System:

Compiler:

Description

When starting DCMTK 3.6.4 dcmtls based applications on RHEL 7.6 (OpenSSL 1.0.2), the following error message is printed:

ERROR: unable to configure the TLS Supported Elliptic Curves extension.

Apparently the OpenSSL library in RHEL does not support the 17 elliptic curves supported in a standard OpenSSL 1.0.2 installation.
„openssl ecparam -list_curves“ only reports the following curves

  secp256k1 : SECG curve over a 256 bit prime field
  secp384r1 : NIST/SECG curve over a 384 bit prime field
  secp521r1 : NIST/SECG curve over a 521 bit prime field
  prime256v1: X9.62/SECG curve over a 256 bit prime field

dcmtls should probably check at runtime which elliptic are really supported by the OpenSSL library and only activate these.