>  openssl ecparam -name secp384r1 -genkey -out privkey.pem
>  openssl dgst -sign privkey.pem -ecdsa-with-SHA1 -out data.sig data.txt
> 
> These commands worked fine on openssl-0.9.8, but now when I run them
> against openssl-1.0.0a, the second one gives me the following error:

Ah, figured it out. The necessary arguments changed from 0.9.8 to 1.0.0
. In newer versions of openssl, you need to use just "-SHA1" or leave
that argument out entirely: apparently it now deduces the necessary
message-digest type from the key itself:

  openssl ecparam -name secp384r1 -genkey -out privkey.pem
  openssl dgst -sign privkey.pem -SHA1 -out data.sig data.txt
  openssl dgst -sign privkey.pem -out data.sig data.txt
  # both work

To write code that can use either new or old versions of openssl, you'll
need to probe "openssl version" and switch on the output.

thanks,
 -Brian
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [email protected]
Automated List Manager                           [email protected]

Reply via email to