Re: openssl 1.1.1k: missing d2i_X509 function prototype

2021-06-30 Thread Viktor Dukhovni
On Thu, Jul 01, 2021 at 01:37:14AM +, Konstantin Boyandin via openssl-users 
wrote:

> > Actually it is still declared, via:
> > 
> >  DECLARE_ASN1_FUNCTIONS(X509)
> 
> But I can't find the function implementation anywhere in code!
> 
> After I build .dll version of OpenSSL 1.1.1k, I get a fatal error when 
> an application tries to call d2i_X509() - it's not present in the library.

Build the library correctly:

  * On a Fedora system:

$ objdump -T /usr/lib64/libcrypto.so.1.1 | grep -w d2i_X509
0020c490 gDF .text  0010  OPENSSL_1_1_0 d2i_X509

  * On a FreeBSD system:

$ nm /usr/local/lib/libcrypto.so.11 | grep -w d2i_X509
003189a0 T d2i_X509

The list of exported symbols for libcrypto has:

util/libcrypto.num:d2i_X509   574  1_1_0   EXIST::FUNCTION:

a correct build will result in a libcrypto with this function exported.

-- 
Viktor.


Re: openssl 1.1.1k: missing d2i_X509 function prototype

2021-06-30 Thread Konstantin Boyandin via openssl-users
On 01.07.2021 08:04, Viktor Dukhovni wrote:
> On Thu, Jul 01, 2021 at 12:36:10AM +, Konstantin Boyandin via
 openssl-users wrote:
> 
>> OpenSSL version: 1.1.1k.
>>
>> I noticed that
>>
>> X509 *d2i_X509(X509 **px, const unsigned char **in, long len);
>>
>> function is no longer defined in openssl/x509.h available in 1.0.x
>> versions, the only one available is now
> 
> Actually it is still declared, via:
> 
>  DECLARE_ASN1_FUNCTIONS(X509)

But I can't find the function implementation anywhere in code!

After I build .dll version of OpenSSL 1.1.1k, I get a fatal error when 
an application tries to call d2i_X509() - it's not present in the library.

What are my options in such a situation?

--
Sincerely,

Konstantin Boyandin


Re: openssl 1.1.1k: missing d2i_X509 function prototype

2021-06-30 Thread Viktor Dukhovni
On Thu, Jul 01, 2021 at 12:36:10AM +, Konstantin Boyandin via openssl-users 
wrote:

> OpenSSL version: 1.1.1k.
> 
> I noticed that
> 
> X509 *d2i_X509(X509 **px, const unsigned char **in, long len);
> 
> function is no longer defined in openssl/x509.h available in 1.0.x 
> versions, the only one available is now

Actually it is still declared, via:

DECLARE_ASN1_FUNCTIONS(X509)

-- 
Viktor.