Dr. Henson,

   I'm trying to understand the status of a thread (noted at the bottom of
this e-mail) in which you recommend a patch to fix an issue that various
people (including myself) incur with using openssl dgst with an external
engine.  It seems that the patch has been applied to certain branches, but
not the mainline (from what I see).  I've found the revision 5a9e3f05ff
which contains the patch.

   Is the fix planned for a later (or recent) version?  Are there reasons
it's not applied across the board?

Best Regards,

Russell Leake

Supporting background material:


Here is the error I receive:

$ openssl dgst -engine abraxas -keyform engine -sign engine_specific_text
-sha256 -out /tmp/tmp.6S9PQZT3hk

engine "abraxas" set.

Error setting context

3072456392:error:260C0065:engine
routines:ENGINE_get_pkey_meth:unimplemented public key
method:tb_pkmeth.c:127:

3072456392:error:0609D09C:digital envelope routines:INT_CTX_NEW:unsupported
algorithm:pmeth_lib.c:164:

Here is your recommended fix:

"Hmm.... that's a bug. In apps/dgst.c there are calls to
EVP_DigestVerifyInit()
and EVP_DigestSignInit(). Try changing the "e" parameter to NULL in both
cases."


https://groups.google.com/forum/#!topic/mailing.openssl.users/vnESwIu9tR0

Reply via email to