Re: X509_sign_ctx and ENGINE

2021-04-13 Thread Ron Kundla
Thanks Jan, I'll check it out and let you know how it goes. Regards, Ron On Tue, Apr 13, 2021 at 12:18 PM Jan Just Keijser wrote: > > Hi, > > On 13/04/21 17:05, Ron Kundla wrote: > > Hello, > > > > I am trying to adapt a piece of software to use an nCipher HSM

X509_sign_ctx and ENGINE

2021-04-13 Thread Ron Kundla
Hello, I am trying to adapt a piece of software to use an nCipher HSM using OpenSSL 1.1.1j along with the nfkm.dll engine library from nCipher. One function uses X509_sign_ctx() to calculate a SHA256 digest and sign a X509 certificate using RSA-PSS. I am running a debug version of x64 on

Compute HMAC using nCipher ENGINE and HSM-based symmetric key

2021-03-30 Thread Ron Kundla
Hello! I have a requirement to generate a HMAC value using a secret/symmetric key inside the HSM. I have seen examples that use public/private keys to do such a thing, but nothing that would use an AES or a nCipher-specific HMAC key. Does OpenSSL support this function using the ENGINE subsystem?