Server not recognizing public key algorithm.

[anhu]

I'm at commit afc1de2 (HEAD -> main, origin/main, origin/HEAD)
I did fullbuild.sh.

I generated a certificate chain. Some relevant command and snipped output:

$ openssl x509  -provider-path /path/to/oqs-provider/_build/lib -provider oqsprovider -in mldsa44_entity_cert.pem -noout -text
...
        Subject Public Key Info:
            Public Key Algorithm: mldsa44
                mldsa44 public key:
                PQ key material:
                    7e:87:7f:a7:ae:3b:26:05:29:5b:28:6a:db:52:d8:
...

So we know this is an mldsa44 public key in the certificate. I then run the following command and get the error as shown below:

$ openssl s_server  -provider-path /path/to/oqs-provider/_build/lib -provider oqsprovider -port 11111 -cert mldsa44_entity_cert.pem -key mldsa44_entity_key.pem
Using default temp DH parameters
error setting certificate
801B7753797A0000:error:0A0000F7:SSL routines:ssl_set_cert:unknown certificate type:../ssl/ssl_rsa.c:239:

Version of openSSL might be relevant:

$ openssl version
OpenSSL 3.0.2 15 Mar 2022 (Library: OpenSSL 3.0.2 15 Mar 2022)

Am I missing something on the s_server command line?

Warm regards, Anthony

[SWilson4]

Hi @anhu! I believe you need to upgrade OpenSSL to at least 3.2 in order to use post-quantum signatures. Please let me know if that solves the problem for you.

[anhu]

OH, interesting. I suppose that is because of the signature support for providers. Thank you.

[anhu]

Good news!!

$ OPENSSL_BRANCH=openssl-3.2.4  scripts/fullbuild.sh
...
$ .local/bin/openssl s_server -provider-path _build/lib/   -provider oqsprovider -provider default -port 11111 -cert mldsa44_entity_cert.pem -key mldsa44_entity_key.pem
Using default temp DH parameters
ACCEPT

Thanks for letting me know.
Warm regards, Anthony

[anhu]

@SWilson4 ,

I'm now at 1246c33.
$ OPENSSL_BRANCH=openssl-3.2.4 scripts/fullbuild.sh no longer builds openssl

$ git clean -xdf
$ OPENSSL_BRANCH=openssl-3.2.4  scripts/fullbuild.sh
...
$ ls .local/bin/
ls: cannot access '.local/bin/': No such file or directory

[SWilson4]

@anhu It works for me in a fresh Ubuntu 24 Docker container. Did the script complete successfully?