Re: osf-contact Striking out everywhere

2019-06-03 Thread Erik Madsen
Thanks for the clarification. If resolution found, would you want me to report that here? I'm off to the Node Team. ⁣Thanks, Erik​ Original Message From: Viktor Dukhovni Sent: Mon Jun 03 15:25:35 PDT 2019 To: openssl-users@openssl.org Subject: Re: osf-contact Striking out e

Re: osf-contact Striking out everywhere

2019-06-03 Thread Viktor Dukhovni
On Mon, Jun 03, 2019 at 02:52:42PM -0700, Erik Madsen wrote: > if (typeof options.clientCertEngine === 'string') { > if (c.context.setClientCertEngine) > c.context.setClientCertEngine(options.clientCertEngine); > > options.clientCertEngine is just the path of the SO file > > and it is call

Re: osf-contact Striking out everywhere

2019-06-03 Thread Erik Madsen
Sorry about thatIm new to this format It was a snip of this: if (typeof options.clientCertEngine === 'string') { if (c.context.setClientCertEngine)    c.context.setClientCertEngine(options.clientCertEngine); options.clientCertEngine is just the path of the SO file and it is callin

Re: osf-contact Striking out everywhere

2019-06-03 Thread Viktor Dukhovni
On Mon, Jun 03, 2019 at 12:54:46PM -0700, Erik Madsen wrote: > any thoughts here? You're posting images instead of text, and to the wrong list. The issue seems to be in node. -- Viktor.

Re: osf-contact Striking out everywhere

2019-06-03 Thread Erik Madsen
any thoughts here? On 6/3/19 10:03 AM, Erik Madsen wrote: Is there any possibility of setting second argument here from config? SSL_CTX_set_client_cert_engine (SSL_CTX * ctx, ENGINE * ) I think at this point it's a Node issue not allowing for an engine to be used for the key...I know GOST w

Re: osf-contact Striking out everywhere

2019-06-03 Thread Erik Madsen
Is there any possibility of setting second argument here from config? SSL_CTX_set_client_cert_engine (SSL_CTX * ctx, ENGINE * ) I think at this point it's a Node issue not allowing for an engine to be used for the key...I know GOST works, but pretty sure that allows for a PrivateKey to be set.

Re: Trying to get a public info for a certificate

2019-06-03 Thread Daniel Pedraza
Thanks a lot, Matt and Viktor! You guys are absolutely right, X509_get0_pubkey_bitstr gives me the same struct that was once inside of cert_info->key->public_key. @Viktor I had also tried your second approach (didn't know about the first one!) and for some reason it doesn't have the "correct" data

Re: osf-contact Striking out everywhere

2019-06-03 Thread Viktor Dukhovni
On Mon, Jun 03, 2019 at 04:41:47PM +0100, Matt Caswell wrote: > On 03/06/2019 15:16, Erik Madsen wrote: > > > Thanks for the reply! Is there any link for avail variables for > > openssl.conf? > > See: > > https://www.openssl.org/docs/man1.1.1/man5/config.html > > > > > [ssl_section] > > KeyF

Re: Trying to get a public info for a certificate

2019-06-03 Thread Viktor Dukhovni
On Mon, Jun 03, 2019 at 10:40:02AM -0500, Daniel Pedraza wrote: > There's a part of the code where we're doing a sha256 hash of the public > key of our certificate. On the older OpenSSL, we were able to get the > public key by doing cert->cert_info->key->public_key->data. On the newer > version, w

Re: Trying to get a public info for a certificate

2019-06-03 Thread Matt Caswell
On 03/06/2019 16:40, Daniel Pedraza wrote: > Hi guys! > > I'm trying to upgrade an old C project from OpenSSL 1.0.2 to the newest 1.1.1 > version. Everything's going smoothly, except for one little detail: > > There's a part of the code where we're doing a sha256 hash of the public key > of >

Trying to get a public info for a certificate

2019-06-03 Thread Daniel Pedraza
Hi guys! I'm trying to upgrade an old C project from OpenSSL 1.0.2 to the newest 1.1.1 version. Everything's going smoothly, except for one little detail: There's a part of the code where we're doing a sha256 hash of the public key of our certificate. On the older OpenSSL, we were able to get the

Signing using EVP_PKEY_encrypt when using pkcs11 engine

2019-06-03 Thread Martin Townsend
Hi, I'm trying to modify the evm/ima utility so that it can use a HSM to perform signing. I've setup SoftHSM and used this to create a certificate with an RSA public key pair. The evmctl code creates the hash and then calls a function to perform the sign operation which ends up calling len = RSA

Re: Compile EC(Elliptic Curve) crypto

2019-06-03 Thread Chitrang Srivastava
Thanks, I will check out. On Mon, Jun 3, 2019 at 6:18 PM Jakob Bohm via openssl-users < openssl-users@openssl.org> wrote: > On 03/06/2019 14:35, Chitrang Srivastava wrote: > > Hi, > > > > I am porting Openssl 1.1.1b for an embedded platform. > > I see that EC folder generate some of function in

Re: Compile EC(Elliptic Curve) crypto

2019-06-03 Thread Jakob Bohm via openssl-users
On 03/06/2019 14:35, Chitrang Srivastava wrote: Hi, I am porting Openssl 1.1.1b for an embedded platform. I see that EC folder generate some of function in assembly for e.g These functions are generated based on environment like x86-64/ppc/armv8 etc. Is there any C version of these function to

Compile EC(Elliptic Curve) crypto

2019-06-03 Thread Chitrang Srivastava
Hi, I am porting Openssl 1.1.1b for an embedded platform. I see that EC folder generate some of function in assembly for e.g These functions are generated based on environment like x86-64/ppc/armv8 etc. Is there any C version of these function to use directly ? Thanks,