Query regarding EVP_PKEY_CTX_set_cb

2022-03-30 Thread Bala Duvvuri via openssl-users
Hi All, Can you please help to understand the use of the callback function that can be set during key generation? 1> For ex: In the OpenSSL 3.0 code, the callback "genrsa_cb" is defined in the file "apps/genrsa.c" : What exactly is being done in this callback function? What does

Re: Crash seen in "OPENSSL_sk_pop_free" API

2021-08-18 Thread Bala Duvvuri via openssl-users
wrote: > On 16 Aug 2021, at 5:58 am, Bala Duvvuri via openssl-users > wrote: > > We are using OpenSSl version 1.1.1d in our program and crash is being seen in > "OPENSSL_sk_pop_free" API, we invoke this API in our certificate verification > API. Since crash

Crash seen in "OPENSSL_sk_pop_free" API

2021-08-16 Thread Bala Duvvuri via openssl-users
Hi All, We are using OpenSSl version 1.1.1d in our program and crash is being seen in "OPENSSL_sk_pop_free" API, we invoke this API in our certificate verification API. Since crash is not seen always, trying to understand from OpenSSL code, when can this occur? Below is the bt of the crash

Crash seen in OPENSSL_sk_pop_free

2021-08-13 Thread Bala Duvvuri via openssl-users
Hi All, We are using OpenSSl version 1.1.1d in our program and crash is being seen in "OPENSSL_sk_pop_free" API, we invoke this API in our certificate verification API. Since crash is not seen always, trying to understand from OpenSSL code, when can this occur? Below is the bt of the crash

Re: OpenSSL 3.0 - providing entropy to EVP_RAND ?

2021-04-16 Thread Bala Duvvuri via openssl-users
NG subsystem is first used. If you simply want to replace the built-in DRBGs with a real random source, create a provider and set the appropriate environment/config variables. Pauli On 24/3/21 4:14 pm, Bala Duvvuri via openssl-users wrote: Hi All,In OpenSSL 1.1.1 version, we were us

Re: OpenSSL 3.0 - providing entropy to EVP_RAND ?

2021-04-14 Thread Bala Duvvuri via openssl-users
nment/config variables. Pauli On 24/3/21 4:14 pm, Bala Duvvuri via openssl-users wrote: Hi All,In OpenSSL 1.1.1 version, we were using RAND_DRBG for random number generation.Using "RAND_DRBG_set_callbacks", we were able to call into our custom API for entropy and no

Unable to load the FIPs config file OpenSSL 3.0

2021-03-30 Thread Bala Duvvuri via openssl-users
Hi All, Can you kindly help me with this error while running the below program that tries to load the configuration which has the FIPs provider? The program is built on build machine and to be run on linux MIPS platform and below error is seen: #include main () { OSSL_LIB_CTX

FIPs algorithm code vs default implementation

2021-03-28 Thread Bala Duvvuri via openssl-users
Hi All, This is a basic question regarding FIPs algorithm code in OpenSSL 3.0, can you kindly let me know: 1> Can you please help to understand the differences in the FIPs algorithm implementation code vs default? Are there additional validations performed in FIPs code? Can you

libcrypto.a and FIPs module in OpenSSL 3.0

2021-03-26 Thread Bala Duvvuri via openssl-users
Hi All, We build the "crypto" code in OpenSSL to generate "libcrypto.a" for MIPs platform. Our application links statically with "libcrypto.a" and uses the OpenSSL crypto API's accordingly. With this compilation model, will it be feasible to integrate with the FIPs object module in OpenSSL

OpenSSL 3.0 - providing entropy to EVP_RAND ?

2021-03-24 Thread Bala Duvvuri via openssl-users
Hi All, In OpenSSL 1.1.1 version, we were using RAND_DRBG for random number generation. Using "RAND_DRBG_set_callbacks", we were able to call into our custom API for entropy and nonce generation. How can this be achieved with EVP_RAND implementation i.e. does it allow entropy to be provided?