Tutorial for OpenSSL3 deprecated API replacement

2021-05-01 Thread Juan Isoza
Hello, I've code based on sample from https://www.programmersought.com/article/37955188510/ It uses RSA function (like RSA_generate_key_ex , RSA_public_decrypt ...) Where can I find a "porting guideline" which help me finding alternative, for each API RSAxx API ? A lot of programmer will need do

Re: Load and unload of engines at runtime

2021-05-01 Thread Dr Paul Dale
Why would you believe that ENGINE_register / ENGINE_unregister are the calls to load/unload an engine?  These calls are for _after_ the engine has been loaded: /*- Manage registration of ENGINEs per "table". For each type, there are 3  * functions;  *   ENGINE_register_***(e) - re

Proposal to Deprecate TLS v1.2 within OWASP ASVS

2021-05-01 Thread Christian Heinrich
I have put forth a Pull Request for OWASP Application Security Verification Standard (ASVS) to deprecate TLS v1.2 and require TLS v1.3 only. This is part of a much larger piece of work to align with PCI-DSS v3.2.1 at https://github.com/OWASP/ASVS/issues/317#issuecomment-829077114 It is also subje