using TLS (>1.2) with more than one certificate

I've a server application and need to support RSA and ECC clients at the same time. I don't know which certificate from my local keystore I have to send to the client, btw I have a rsa and a ecc certificate in my keystore already. I don't know with which certificate (rsa or ecc) a client comes

using TLS (>1.2) with more than one certificate

I've a server application and need to support RSA and ECC clients at the same time. I don't know which certificate from my local keystore I have to send to the client, btw I have a rsa and a ecc certificate in my keystore already. I don't know with which certificate (rsa or ecc) a client comes

cross compiling on linux for macos

Hi guy, Can somebody give me a hint for the following topic please? I want to cross compile the latest openssl v1.1 on linux (centos 7) as target macos 32/64 bit. Thanks in advance Tobi

win32 build and freeing pointers

Hi guys, I've experienced the following strange behaviour. I have the same code and the same openssl build. With x64 everything I fine, but with x86 build not. With a 32bit environment I got the following access vialotion. I read that windows marks a freed pointer as "0X", but we are

Engine with custom evp method callbacks

Hi everbody, I`m looking for a working example on how to implements a custom engine based on EVP methods callbacks. First I was implementing my custom engine based on RSA callbacks, but we found out that we cannot use this mechanism, therefore I need to change to EVP, details are written here

get serialnumber from X509_REQ

How can I get the serialnumber from X509_REQ pointer. I saw in the code that there is no getter function? Regard Tobi

AW: openssl and external card reader support in TLS

We decided to implement the engine concept, but as far as I understood acts the engine on a globally level, right? But in our application we have two different TLS communication ways, is it possible that our custom engine is only active for one transport way i.e. on ssl context level?

AW: openssl and external card reader support in TLS

Our PKCS11 module development will discontinue and therefore I can`t use it anymore, but the idea is great and very interesting. To give more details we need a callback or similar mechanism to replace the signature created in Certificate TLS message with our signature coming from the card

openssl and external card reader support in TLS

I need to implement support for the external authentication of a card reader within a TLS handshake. We did this already with PKCS11 using the C_Sign function and it is working fine. Now I need to implement the same functionality in another use case with openssl for TLS handshake. My Question

RAND_seed buffer freeing

I`ve one question regarding RAND_seed, the first parameter refers to a buffer, who is freeing that buffer afterwards? Can I free it after the call to RAND_seed or is this done by openssl?

authEnvelopedData

Hi everyone, I need to create a "authEnvelopedData" (https://tools.ietf.org/html/rfc5083#2.1) ASN1 structure but I know how to archive this. I tried with "PKCS7_encrypt" but here I got only "envelopedData". I`ll try next with CMS_encrypt and to modify CMS_ContentInfo to add the