Re: [openssl-dev] Dynamically adding a NID

2017-07-05 Thread Dr. Stephen Henson
On Sun, Jul 02, 2017, Salz, Rich via openssl-dev wrote: > > I tried using OBJ_create() with NULL or an empty string for the OID, but > > currently it checks that the given OID is actually a valid one. Is there > > any workaround to avoid this other than issuing my own OID? > > No. Just get an

Re: [openssl-dev] Dynamically adding a NID

2017-07-01 Thread Salz, Rich via openssl-dev
> I tried using OBJ_create() with NULL or an empty string for the OID, but > currently it checks that the given OID is actually a valid one. Is there any > workaround to avoid this other than issuing my own OID? No. Just get an OID ARC, such as from the IETF Enterprise MIB [it's free] and

Re: [openssl-dev] Dynamically adding a NID

2017-07-01 Thread Nicola Tuveri
> > What do you want to do with the NID? Does it need to have a valid short > name > and/or long name associated with it (so OBJ_sn2nid etc work) but no valid > OID > or do you just need a NID value? > > You're right that currently OBJ_create() needs a valid OID passed to it: > you > can't pass a

Re: [openssl-dev] Dynamically adding a NID

2017-07-01 Thread Dr. Stephen Henson
On Mon, Jun 26, 2017, Nicola Tuveri wrote: > Hi, > > I'm working on ENGINE development, and I have the need to add an NID for a > custom message digest, and eventually for ciphers and PKEY methods. > Some of the associated object don't (and won't ever) have an associated > OID, but I need to add

Re: [openssl-dev] Dynamically adding a NID

2017-06-25 Thread Salz, Rich via openssl-dev
You can get an OID arc of your own for free. And then you can use real OID’s which you just “throw away” See https://en.wikipedia.org/wiki/Private_Enterprise_Number -- openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

[openssl-dev] Dynamically adding a NID

2017-06-25 Thread Nicola Tuveri
Hi, I'm working on ENGINE development, and I have the need to add an NID for a custom message digest, and eventually for ciphers and PKEY methods. Some of the associated object don't (and won't ever) have an associated OID, but I need to add them dynamically to avoid requiring patches to the