ASN1_item_sign from 1.0.0k to 1.0.1

2013-12-17 Thread andrew cooke
Hi, I realise the 1.0.0 to 1.0.1 transition happened some time ago, but it only hit Centos recently (with the 6.5 release). Some of our code broke, and while I suspect the problem is too low-level / detailed for anyone to say anything useful, I thought I better ask, just in case... (if you can h

Re: ASN1_item_sign from 1.0.0k to 1.0.1

2013-12-17 Thread andrew cooke
I should have also said that this is called by X509_REQ_sign. So, in short, the EVP_MD.digest atrtibute is not used to do signing when passed to X509_REQ_sign. You know, it's only writing that the word "digest" has jumped out at me. Is that even the right place for doing signing? Or is it mean

Re: ASN1_item_sign from 1.0.0k to 1.0.1

2013-12-17 Thread Dr. Stephen Henson
On Tue, Dec 17, 2013, andrew cooke wrote: > > I should have also said that this is called by X509_REQ_sign. > > So, in short, the EVP_MD.digest atrtibute is not used to do signing when > passed to X509_REQ_sign. > > You know, it's only writing that the word "digest" has jumped out at me. Is >

Re: ASN1_item_sign from 1.0.0k to 1.0.1

2013-12-17 Thread andrew cooke
Yes, that's how my more recent engine-based code works. Maybe the best thing is to merge those two code bases and get rid of this old stuff. Thanks, Andrew On Tue, Dec 17, 2013 at 07:56:46PM +0100, Dr. Stephen Henson wrote: > On Tue, Dec 17, 2013, andrew cooke wrote: > > > > > I should have

Re: ASN1_item_sign from 1.0.0k to 1.0.1

2013-12-17 Thread andrew cooke
Argh, OK, the attribute is called sign. So it's correct, I just had the wrong name in my notes. Andrew On Tue, Dec 17, 2013 at 03:51:04PM -0300, Andrew Cooke wrote: > > I should have also said that this is called by X509_REQ_sign. > > So, in short, the EVP_MD.digest atrtibute is not used to