[openssl-users] Loading RSA private key from ENGINE

I am currently exporing the ENGINE capabilities. The examples are quite clear about how to link OpenSSL with methods that are available in a hardware module: - implement RSA_METHOD in MyEngine, e.g. rsaSign() wich calls rsaSign_HW() - ENGINE_register_RSA(MyEngine) --> OpenSSL will then

[openssl-users] ASN1 compiler

Hi All,   Just a short question. Does OpenSSL project use the Objective Systems ASN1C?   Thanks Fabrizio -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

[openssl-users] Debug information in pdb file

Hi all, Is there an 'official' way (or at least some recommended modification to the build scripts) to generate pdb files with the same name of the libraries? This question has been asked in the past. I wonder if there is really no straightforward solution, or am I missing something? I'm using

[openssl-users] Clarification about content of folder /ocsp

Hello,   I could not find any API documentation about the code in /crypto/ocsp. Does it mean that these functions are not part of the official API and therefore should not be directly used?   Is this "just" code for openssl.exe ocsp tool, intended as example?   Thanks Fabrizio

Re: [openssl-users] X509_STORE manipulations and thread-safety

Objects are copied and ref-counted when an SSL is created from an SSL_CTX... To me this seems is only half-true. In SSL_new() we see that only the own certificate/key gets duplicated with ssl_cert_dup(ctx-cert), as for the trusted stuff in X509_STORE only the pointer is copied. Inside

[openssl-users] X509_STORE manipulations and thread-safety

Hello All, Is it safe to have a thread reload trusted certificates and crls into a SSL_CTXs X509_STORE while connections are running in other threads, especially when considering renegotiations? The idea would be to replace the instance of X509_STORE with a new one or is there a better way to

[openssl-users] Workaround for 'unexpected record' error during renegotiation

Hello All, I experience the same problem as other people described in the past. Despite reading all the postings on the topic I am still not sure if there is a usable workaround to make spontaneous message exchange between server an client work: - both client and server exchange spontaneous