Order of providers breaks my keymgmt

2022-01-17 Thread Milan Kaše
Hi, I successfully implemented OpenSSL v3 provider which provides store and keymgmt and I can use it to sign a cms with the following command: openssl cms -sign -signer myprov:cert=0014 -provider myprov -provider default However when I swap the order of providers (in the real world scenario the p

Re: What is the correct way to use OSSL_DECODER

2022-01-12 Thread Milan Kaše
By further comparing the scenario with the built-in file provider and my external provider I found that this has something to do with library contexts. When x509_pubkey_ex_d2i_ex tries to decode the certificate's public key it always uses the default library context. When loading a certificate fro

What is the correct way to use OSSL_DECODER

2022-01-11 Thread Milan Kaše
Hi, in follow up to https://github.com/openssl/openssl/issues/17456 where Matt Caswell writes > The normal way of using the decoder APIs is to set up an OSSL_DECODER_CTX and > then call OSSL_DECODER_from_bio or similar function to iterate through the > available decoders to find the right one fo