Eh, I had it right all along, but when I dumped it via x509 later it showed a strange OID; seems the directory I was in had an old 0.0.8e OpenSSL.exe... *face palm*
.................................... Erik Tkal Juniper OAC/UAC/Pulse Development -----Original Message----- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Dr. Stephen Henson Sent: Monday, November 05, 2012 6:57 PM To: openssl-users@openssl.org Subject: Re: Question about EVP_get_digestbynid and ECDSA On Mon, Nov 05, 2012, Erik Tkal wrote: > I have a tool that is creating a cert using X509_sign. I noticed that > there are no EVP_MD structs that handle ECDSA properly and found this > thread from a while back. > What version of OpenSSL is this for? For OpenSSL 1.0.0 and later you just pass the correct key and digest in. So if you pass an EC key and EVP_sha256() it will use the correct algorithms and set up the ASN1 strutucture appropriately. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org