Re: External client certificate signature function

2014-10-15 Thread Dr. Stephen Henson
On Wed, Oct 15, 2014, Fredrik Jansson wrote: > I just realised I can create a RSA_METHOD object and set that in my engine. > > But what about ECDSA_ENGINE? > > There is no struct definition available in the public headers, and no > public functions to change the members of the struct, e.g. set a

Re: External client certificate signature function

2014-10-15 Thread Fredrik Jansson
I just realised I can create a RSA_METHOD object and set that in my engine. But what about ECDSA_ENGINE? There is no struct definition available in the public headers, and no public functions to change the members of the struct, e.g. set a new signing function. Is this not possible with ECDSA?

Re: External client certificate signature function

2014-10-15 Thread Fredrik Jansson
Hi Steve! I will try to take that path, thank you! //Fredrik On Mon, Oct 13, 2014 at 6:08 PM, Dr. Stephen Henson wrote: > On Mon, Oct 13, 2014, Fredrik Jansson wrote: > >> Hi! >> >> I have a device where I cannot access the client certificate's private >> key directly, but have access to veri

Re: External client certificate signature function

2014-10-13 Thread Dr. Stephen Henson
On Mon, Oct 13, 2014, Fredrik Jansson wrote: > Hi! > > I have a device where I cannot access the client certificate's private > key directly, but have access to verification and signature functions. > > The certificate, in DER format, is accessible. > > I need to use client certificates in my T

External client certificate signature function

2014-10-13 Thread Fredrik Jansson
Hi! I have a device where I cannot access the client certificate's private key directly, but have access to verification and signature functions. The certificate, in DER format, is accessible. I need to use client certificates in my TLS connection and found the SSL_CTX_set_client_cert_cb functio