On Thu, Feb 03, 2000, Renato Portela wrote:

> We are still working in OCSP implementation, but as we are beginners in
> modssl... we have many questions!
> 
> In my function (that is called by an hook in ssl_callback_SSLVerify) i 
> need the server private key (defined in SSLCertificateKeyFile) to sign 
> the ocsp request. But as it is encrypted i don't know how can i get it.
> 
> I don't know if the private key (or the password) is in any struct.
> 
> Can you help me on this ?

You can find the server RSA private key as a "EVP_PKEY *" via:

   sc->pPrivateKey[SSL_AIDX_RSA]

where sc is the server config variable from ssl_callback_SSLVerify.
(btw, the DSA private key stuff can be found via SSL_AIDX_DSA). It is
not encrypted and can be directly accessed via OpenSSL's EVP functions.
See the mod_ssl source code for more details.

                                       Ralf S. Engelschall
                                       [EMAIL PROTECTED]
                                       www.engelschall.com
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to