Re: EVP_PKEY_get_int_param is not getting degree from EC key

On 2022-01-05 09:45:14 +0100, Tomas Mraz wrote: > > How does one know (without going through > > EVP_PKEY_gettable_params(EVP_PKEY *pkey) and > > EVP_PKEY_get_params(const EVP_PKEY *pkey, OSSL_PARAM params[])) what > > method to use to retrieve what parameter? > > So you're basically asking to put

Re: EVP_PKEY_get_int_param is not getting degree from EC key

Thank you for the answer! On 2022-01-03 10:11:19 +0100, Tomas Mraz wrote: > You're using the secp384r1 curve which is a prime field curve. The > OSSL_PKEY_PARAM_EC_CHAR2_M parameter can be obtained only for binary > field curves. > > If you have a group NID for the curve of the EC key, you could

EVP_PKEY_get_int_param is not getting degree from EC key

Greetings, I'm trying to port my program to openssl 3.0 and in the process I need to replace EC_GROUP_get_degree(EC_KEY_get0_group(ec)) with something that is not deprecated. I'm trying to use EVP_PKEY_get_int_param with OSSL_PKEY_PARAM_EC_CHAR2_M, however it does not work. I'm assuming I'm just d

PkiPath with openssl

I`m looking for a function within openssl to do the following:   an ASN.1 DER encoded sequence of certificates, defined as follows: PkiPath ::= SEQUENCE OF Certificate Within the sequence, the order of certificates is such that the subject of the first certificate is the issuer of the sec

BIO in memory usage....

I`d like to understand how a memory bio can be reseted with the internal read counter back to zero for further reusage. e.g. I want to try to read first der and then pem d2i_X509 and then:

Fail to compile on Windows with MSVC

When compiling the latest OpenSSL with MSVC, the command prompt disappears part way through compilation. It never finishes. __ OpenSSL Project http://www.openssl.org User Support Mailing List

OpenSSL CA + Windows client

ge or code snippet in Visual Basic (preferred) or C++ is welcome. Thanks, Rudolf Wolf __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

Importing root certificates

Hello, I wonder how to add a CA to openssl. In particular, I try to do use fetchmail with ssl and get following mesages: fetchmail: Warning: server certificate verification: unable to get local issuer certificate fetchmail: Issuer Organization: TC TrustCenter for Security in Data Networks Gmb

openssl 0.9.6a on Unixware 2.1.3

succeeded with installation on a similar version of Unixware or with previous versions of openssl? Thanks ! Please answer as well directly to me. Pavel Wolf Radiomobil, a.s. __ OpenSSL Project

Re: SSL handshaking on remote machine

rator cards for all your content servers. It's MUCH less headache, and it will be faster (as well as more effective, and time-efficient, and energy-efficient) in the long run than the kind of hack you're suggesting. --- Mat Butler, Winged Wolf <[EMAIL PROTECTED]

Re: Create my own CA

, which is essentially a .crt minus the base-64 encoding. (openssl x509 -inform crt -in ca.crt -outform der -out ca.der ... or something like that. It's been a while since I've done it. There's an FAQ entry on it, at the least.) --- Mat Butler, Winged Wolf <[E

Re: Problem with Global Server ID - SGC

In order for the stepup to work, you have to allow 40-bit encryption so it can figure out that it needs to step it up. Regards, -Mat --- Mat Butler, Winged Wolf <[EMAIL PROTECTED]> SPASTIC Web Engineer SPASTIC Server Administrator Begin FurryCod