search

gost-engine / engine

A reference implementation of the Russian GOST crypto algorithms for OpenSSL
Apache License 2.0
379 stars 174 forks source link

Ошибка при использовании с openvpn #447

Closed ne-vlezay80 closed 1 year ago

ne-vlezay80 commented 1 year ago 
/home/user/openvpn # openvpn --providers gostprov --data-ciphers magma-cbc  --dev gvpn0 --dev-type tun
2023-05-31 22:45:39 DEPRECATION: No tls-client or tls-server option in configuration detected. OpenVPN 2.7 will remove the functionality to run a VPN without TLS. See the examples section in the manual page for examples of a similar quick setup with peer-fingerprint.
2023-05-31 22:45:39 OpenVPN 2.6.4 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
2023-05-31 22:45:39 library versions: OpenSSL 3.1.0 14 Mar 2023, LZO 2.10
2023-05-31 22:45:39 ******* WARNING *******: '--cipher none' was specified. This means NO encryption will be performed and tunnelled data WILL be transmitted in clear text over the network! PLEASE DO RECONSIDER THIS SETTING!
2023-05-31 22:45:39 ******* WARNING *******: '--auth none' was specified. This means no authentication will be performed on received packets, meaning you CANNOT trust that the data received by the remote side have NOT been manipulated. PLEASE DO RECONSIDER THIS SETTING!
2023-05-31 22:45:39 ******* WARNING *******: All encryption and authentication features disabled -- All data will be tunnelled as clear text and will not be protected against man-in-the-middle changes. PLEASE DO RECONSIDER THIS CONFIGURATION!
2023-05-31 22:45:39 TUN/TAP device gvpn0 opened
2023-05-31 22:45:39 Could not determine IPv4/IPv6 protocol. Using AF_INET
2023-05-31 22:45:39 UDPv4 link local (bound): [AF_INET][undef]:1194
2023-05-31 22:45:39 UDPv4 link remote: [AF_UNSPEC]
2023-05-31 22:45:39 OpenSSL: error:0308010C:digital envelope routines::unsupported
2023-05-31 22:45:39 OpenSSL: error:0308010C:digital envelope routines::unsupported
2023-05-31 22:45:39 OpenSSL: error:0308010C:digital envelope routines::unsupported
2023-05-31 22:45:39 OpenSSL: error:0308010C:digital envelope routines::unsupported
2023-05-31 22:45:39 OpenSSL: error:0308010C:digital envelope routines::unsupported
2023-05-31 22:45:39 OpenSSL: error:0308010C:digital envelope routines::unsupported
2023-05-31 22:45:39 OpenSSL: error:0308010C:digital envelope routines::unsupported
2023-05-31 22:45:39 OpenSSL: error:12000090:random number generator::unable to fetch drbg
2023-05-31 22:45:39 RAND_bytes() failed
2023-05-31 22:45:39 Assertion failed at crypto.c:1635 (rand_bytes(output, len))
2023-05-31 22:45:39 Exiting due to fatal error
beldmit commented 1 year ago

Gost provider не дописан (и желающие дописать активно приветствуются). Но тут всё проще, я подозреваю, что при таком наборе ключей не грузится default провайдер и поэтому не инициализируется ДСЧ.