[openssl-users] Certificate Revocation List and SSL

2018-03-21 Thread Norm Green
How does one specify the CRL to the SSL_CTX when setting up a connection?  I would expect there to be something similar to SSL_CTX_use_certificate(), such as: int SSL_CTX_use_crl(SSL_CTX *ctx, X509_CRL *crl) but can nothing like that. Norm Green -- openssl-users mailing list To unsubscribe:

Re: [openssl-users] Windows shared libraries version information needs some fixes

2018-03-21 Thread RTT
After your forth commit, seems all is working fine. Exe and dlls with, and correct, version information now. Thanks. On 21/03/2018 02:08, Salz, Rich via openssl-users wrote: Please look athttps://github.com/openssl/openssl/pull/5704 and see if it fixes the issues. -- openssl-users mailing

Re: [openssl-users] Hashing public keys

2018-03-21 Thread Dr. Pala
Hi Jan, not sure if this might help you, I solved the problem by using X509_PUBKEY + i2d_X509_PUBKEY. Here's an example:     https://github.com/openca/libpki/blob/b87b647170cb5f71e00baffe609f5a02edfa3845/src/openssl/pki_keypair.c#L307 I hope that helps, Cheers, Max On 3/21/18 1:42 PM, Jan Dan

Re: [openssl-users] Hashing public keys

2018-03-21 Thread Dr. Matthias St. Pierre
Hello Jan, the canonical way to create the hash of the public key is to use d2i_PUBKEY() to save the public key in (binary) DER format and then calculate the hash of that using EVP_DigestInit()/EVP_DigestUpdate()/EVP_DigestFinal(). Hope that helps, Matthias Am 21.03.2018 um 14:42 schrieb Jan D

[openssl-users] Hashing public keys

2018-03-21 Thread Jan Danielsson
Hello, Given an EVP_PKEY (can contain either RSA or EC key), is there a function to generate a hash of the public key? (I have some vague memory of having read a few years ago that there wasn't any standardized way to hashing EC keys (+parameters) yet. If so; has this been remedied?). (St

Re: [openssl-users] OpenSSL version 1.1.1 pre release 3 published

2018-03-21 Thread Dennis Clarke
On 20/03/18 08:03 PM, Viktor Dukhovni wrote: On Mar 20, 2018, at 5:55 PM, Dennis Clarke wrote: signverifysign/s verify/s rsa 4096 bits 0.082541s 0.001186s 12.1843.0 That seems remarkably slow, is that expected with this CPU? My laptop (PowerBook pro) is a

Re: [openssl-users] Windows shared libraries version information needs some fixes

2018-03-21 Thread Matt Caswell
On 21/03/18 09:36, Matt Caswell wrote: > > > On 21/03/18 00:45, RTT wrote: >> Hello, >> >> Building the shared libraries (version 1.1.1 pre 3) for Windows with >> Visual Studio, targets VC-WIN32 or VC-WIN64A, result in DLLs with >> version information with outdated copyright date, i.e. "Copyrig

Re: [openssl-users] Windows shared libraries version information needs some fixes

2018-03-21 Thread Matt Caswell
On 21/03/18 00:45, RTT wrote: > Hello, > > Building the shared libraries (version 1.1.1 pre 3) for Windows with > Visual Studio, targets VC-WIN32 or VC-WIN64A, result in DLLs with > version information with outdated copyright date, i.e. "Copyright > 1998-2016 The OpenSSL Authors. All rights rese