Eh, I had it right all along, but when I dumped it via x509 later it showed a 
strange OID; seems the directory I was in had an old 0.0.8e OpenSSL.exe...  
*face palm*

....................................
Erik Tkal
Juniper OAC/UAC/Pulse Development



-----Original Message-----
From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] 
On Behalf Of Dr. Stephen Henson
Sent: Monday, November 05, 2012 6:57 PM
To: openssl-users@openssl.org
Subject: Re: Question about EVP_get_digestbynid and ECDSA

On Mon, Nov 05, 2012, Erik Tkal wrote:

> I have a tool that is creating a cert using X509_sign.  I noticed that 
> there are no EVP_MD structs that handle ECDSA properly and found this 
> thread from a while back.
> 

What version of OpenSSL is this for?

For OpenSSL 1.0.0 and later you just pass the correct key and digest in. So if 
you pass an EC key and EVP_sha256() it will use the correct algorithms and set 
up the ASN1 strutucture appropriately.

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org 
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to