pkcs7 cert loading, why this code doesn't work?

Hello, I have a pkcs7 encoded cert which i want to load. the following code block works fine: ( I am doing a base64 decoding first, will explain the reason in the second half): BIO *bio, *b64; PKCS7 * p7; b64 = BIO_new(BIO_f_base64()); BIO_set_flags(b64, BIO_FLAGS_BASE64_NO_NL); bio

AES speed?

The performance of the 1.0.0 AES algorithm as reported by "openssl speed", appears to be much lower with block sizes of 16, 64 and 256 bytes than with previous releases. Larger block sizes of 1024 and 8192 bytes show good performance. Is this to be expected? Tests were run on a RedHat Linux system

openssl 1.0 path validation

I am using openssl to work with certificates from smart cards. I want to do full path validation, but I'm a little confused how to achieve this. Smart cards don't use the normal web CA's, so I may not have the trusted roots, or intermediaries. When openssl builds a path, does it ever go download th