Forum Bugs

error:0D0C50A1:asn1 encoding routines:ASN1_item_verify:unknown message digest algorithm

ilam@teamtsi.com
Hi,

We recently started using wildcard ssl certificate in our IIS server and noticed that prince can not process css files under SSL. Log file shows this warning/error

https://sandbox.teamtsi.com/test.css: warning: error:0D0C50A1:asn1 encoding routines:ASN1_item_verify:unknown message digest algorithm

But if the css files are linked without https, page converts fine.

I've tried converting with Prince PDF version 8 and 9 and they both fail to process css.

Here is a test page you can use to replicate the issue
https://sandbox.teamtsi.com/


My server configuration
-------------------------
- Windows Server 2012
- IIS 8
- Prince 8.1, (also tried with 9.0)
- SSL Signature Algorithm: sha256RSA


Any idea how to solve this issue. This is very critical to us as many of the HTML reports are not being rendered to PDF proprely.


Thanks
I

  1. princeerror.PNG101.4 kB
mikeday
Looks like we will need to upgrade SSL support. We can create an updated Prince build in the next day or two.

In the meantime, one workaround is to just disable SSL, if Prince is running on the same local network as the server, and there are no security concerns. You can do this by passing --insecure on the command-line.
mikeday
We now have an updated alpha build for Windows that includes updated SSL support.
ilam@teamtsi.com
Hi Mike,

Alpha build works like a charm, any clue when final build will be available?

Thanks for the tip to use --insecure. I'll look into it as well. Any idea if it is any faster to convert with --insecure?

Thanks
I

mikeday
It may be slightly faster, due to reduced SSL negotiation, but I would not expect it to be hugely different, unless you are request many different resources over HTTPS.

There is no timetable for the next release of Prince yet, but the alpha should be stable in the meantime.