Issue with API EVP_PKEY_new_CMAC_key

2021-10-05 Thread Suji
Hi, I am getting an issue with EVP_PKEY_new_CMAC_key while using Engine as an argument. It was a negative test case, passed an invalid key length. It hits the error, and when the application exits , it gets a segmentation fault. >From my analysis, the scenario seems like this. When the call happe

Re: OpenSSL 3.0.0 enabling SSLv3 support

2021-10-05 Thread Viktor Dukhovni
On Tue, Oct 05, 2021 at 03:49:48PM -0700, Kory Hamzeh wrote: > It looks like SSLv3 is not built by default in OpenSSL 3.0.0. At least > SSLv3_method() is not define, and looking at the conditional > compilation of that function, it makes sense. > > What command line option do I pass the Configure

OpenSSL 3.0.0 enabling SSLv3 support

2021-10-05 Thread Kory Hamzeh
Hi, It looks like SSLv3 is not built by default in OpenSSL 3.0.0. At least SSLv3_method() is not define, and looking at the conditional compilation of that function, it makes sense. What command line option do I pass the Configure script to enable it? I tried enable-sslv3 and enable-SSLv3. It

Re: Why custom RSA engine is not calling default RSA method?

2021-10-05 Thread Shariful Alam
Dear Dmitry, Thanks for sharing the patch. I will try and let you know the results. Thanks, Shariful On Mon, Oct 4, 2021 at 5:56 AM Dmitry Belyavsky wrote: > Dear Shariful, > > Could you please try the patch from > https://github.com/openssl/openssl/pull/16734? > > On Wed, Sep 29, 2021 at 6:59

Help on mixed encrypt/decrypt data using C++/java

2021-10-05 Thread Jason Qian via openssl-users
Hi, We encrypt data using openSSL C++ API, decrypt data using java(default security package). 99.9% of the time, it works fine, but when multi-instances of apps encrypt data at same time, java fails to decrypt . We are using version 1.1.01 (AES/CBC/PKCS5Padding) mpCtx = EVP_CIPHER_CTX_new(); EV

Re: [EXTERNAL] Re: Alternative for structure opaque X509 & X509_STORE_CTX

2021-10-05 Thread Shivakumar Poojari
Thanks Matt!! your suggestions are very helpful. From: Matt Caswell Sent: Tuesday, October 5, 2021 1:20 PM To: Shivakumar Poojari ; openssl-users@openssl.org Cc: Paramashivaiah, Sunil ; Kumar Mishra, Sanjeev ; Bhattacharjee, Debapriyo (c) Subject: [EXTERNAL]

Re: Alternative for structure opaque X509 & X509_STORE_CTX

2021-10-05 Thread Matt Caswell
On 05/10/2021 05:24, Shivakumar Poojari wrote: :error: invalid use of incomplete type 'X509' {aka 'struct x509_st'}      if (x->ocsp && x->ocsp->ocsp_url) Strangely there is no ocsp field in an x509_st even in 1.0.2 that I can see. :error: invalid use of incomplete type 'X509' {aka 'str