Re: [openssl-users] build.info

2018-09-04 Thread Richard Levitte
We currently don't have per-engine support of the kind. The cleanest you can do is probably having a private config looking something like this: our %targets = ( 'mytarget' => { inherit_from=> [ 'whatever' ], dso_ldflags => '-lsomelib' }

Re: [openssl-users] X25519 - why openssl shows server temp key as 253 bits?

2018-09-04 Thread Viktor Dukhovni
> On Sep 4, 2018, at 12:10 PM, Michael Richardson wrote: > > My understanding is that you need x and y to do the computation. > (And I observe this in code) The Y coordinate is not needed for X25519 and X448 Diffie-Helman key agreement, these operate on the X (sometimes called "u") coordinate on

Re: [openssl-users] build.info

2018-09-04 Thread Thomás Inskip
Thanks. That is correct. I'd like to specify -lsomellib for just one engine target in engines/build.info. On Tue, Sep 4, 2018 at 12:12 AM Jakob Bohm wrote: > On 04/09/2018 08:55, Wouter Verhelst wrote: > > On 9/3/18 9:05 PM, Thomás Inskip wrote: > >> Does anyone know how I can specify that a

Re: [openssl-users] X25519 - why openssl shows server temp key as 253 bits?

2018-09-04 Thread Michael Richardson
Robert Moskowitz wrote: > A curve point needs an x and a y.  But do you need the y for the > computation.  Do you only need its sign?  I don't know.  I am not a > mathematician. My understanding is that you need x and y to do the computation. (And I observe this in code) However, si

Re: [openssl-users] passing CA bundle as buffer, instead of file path, to X509_STORE_CTX_ functions

2018-09-04 Thread J Decker
You can use a BIO_new( BIO_s_mem() ) to feed the memory through BIO_writeand PEM_read_bio_X509 something like ... https://github.com/d3x0r/SACK/blob/master/src/netlib/ssl_layer.c#L780 On Tue, Sep 4, 2018 at 8:07 AM Eli Golosovsky wrote: > Is there an option, in *OpenSSL 1.1.1*, to load a CA bu

[openssl-users] passing CA bundle as buffer, instead of file path, to X509_STORE_CTX_ functions

2018-09-04 Thread Eli Golosovsky
Is there an option, in *OpenSSL 1.1.1*, to load a CA bundle from memory (buffer / string) instead of loading it from a file? >From my experience, loading a CA bundle can be achieved by using the *X509_STORE_CTX_* functions, on an *X509_STORE_CTX* object, representing the certificate, and finalizin

Re: [openssl-users] X25519 - why openssl shows server temp key as 253 bits?

2018-09-04 Thread Viktor Dukhovni
With curve25519, the scalar multiplication function: (x, y) -> n * (x, y) = (x', y') -> x' has the property that for valid points on the extended curve (degree two extension of F(p) that gives a y for every x in F(p)), x' depends only on x, and can be effectively computed from x alone, and this

Re: [openssl-users] X25519 - why openssl shows server temp key as 253 bits?

2018-09-04 Thread Jakob Bohm
On 04/09/2018 16:24, Robert Moskowitz wrote: My source is Dr. Lange at the IETF meeting in Toronto when the IETF selected EC25519. A curve point needs an x and a y.  But do you need the y for the computation.  Do you only need its sign?  I don't know.  I am not a mathematician. I may have m

Re: [openssl-users] X25519 - why openssl shows server temp key as 253 bits?

2018-09-04 Thread Robert Moskowitz
My source is Dr. Lange at the IETF meeting in Toronto when the IETF selected EC25519. A curve point needs an x and a y.  But do you need the y for the computation.  Do you only need its sign?  I don't know.  I am not a mathematician. I may have misunderstood her at the time. On 09/04/2018 1

Re: [openssl-users] X25519 - why openssl shows server temp key as 253 bits?

2018-09-04 Thread Jakob Bohm
On 04/09/2018 15:43, Robert Moskowitz wrote: And I seem to recall that one bit is for compact representation. That is, is y positive or negative.  With p256, you have to transmit x and y or deal with the compact representation patent. Not sure if this applies do X25519 and Ed255 which use dif

Re: [openssl-users] X25519 - why openssl shows server temp key as 253 bits?

2018-09-04 Thread Robert Moskowitz
And I seem to recall that one bit is for compact representation. That is, is y positive or negative.  With p256, you have to transmit x and y or deal with the compact representation patent. On 09/04/2018 08:00 AM, Kyle Hamilton wrote: Probably because the definition of X25519 requires that bits

Re: [openssl-users] X25519 - why openssl shows server temp key as 253 bits?

2018-09-04 Thread Kyle Hamilton
Probably because the definition of X25519 requires that bits 0, 1, and 2 of the first byte of the private key are set to 0 before being used, and OpenSSL counts the number of bits including the highest-order set bit. (Really, there's an additional 2 bits that are also set to known values: bit 6 of

Re: [openssl-users] openssl 1.1.1 release

2018-09-04 Thread Dr. Matthias St. Pierre
Final release is still scheduled for September 11, see also the discussion on openssl-project https://mta.openssl.org/pipermail/openssl-project/2018-September/001010.html HTH, Matthias Von: openssl-users Im Auftrag von Juan Isoza Gesendet: Dienstag, 4. September 2018 09:09 An: openssl-users@o

Re: [openssl-users] build.info

2018-09-04 Thread Jakob Bohm
On 04/09/2018 08:55, Wouter Verhelst wrote: On 9/3/18 9:05 PM, Thomás Inskip wrote: Does anyone know how I can specify that a specific shared library (in this case an engine) is dependent on a system-installed shared library (i.e. not built along with openssl)?.  Basically the equivalent of LD

Re: [openssl-users] openssl 1.1.1 release

2018-09-04 Thread Juan Isoza
Hello, Have you more info ? regards Le lun. 27 août 2018 à 15:12, Matt Caswell a écrit : > > > > We are hoping that pre 9 will be the last beta and the next release will > be the final one. > > > We have tentatively discussed 11th September as a possible release date > - but no definitive decisi