Re: OpenSSL version 3.0.0-alpha1 published

2020-04-26 Thread Yann Ylavic
On Sun, Apr 26, 2020 at 12:15 AM Kurt Roeckx wrote: > > On Fri, Apr 24, 2020 at 01:26:05PM +0200, Yann Ylavic wrote: > > > > - DH_bits(dh) (used for logging only in httpd) > > Replaced by BN_num_bits(DH_get0_p(dh)). > > Not sure this one should be deprecated, it seems to be used in several > >

Re: questions on using ed25519

2020-04-26 Thread Nicola Tuveri
The change in itself is quite trivial, just editing the dgst manpage to remove the reference to pkeyutl. The issue has more instructions and the idea was to use it as a way to let a new developer familiarize with OpenSSL contributing guidelines and process. Another user already started working

OpenSSL key agent available?

2020-04-26 Thread Michael Ströder
HI! Does anybody know an engine implementation which delegates private key operations to a running key agent listening on a Unix domain socket? Similar like ssh-agent or gpg-agent but available for applications using OpenSSL API. Ciao, Michael.

Re: OpenSSL key agent available?

2020-04-26 Thread Salz, Rich via openssl-users
It has been done. For example, we leverage the ASYNC interface to make the private-key operations remote. There was also an RT ticket that had an implementation for a version years ago. (I can't find the RT but I know it was there.) The PKCS#11 stuff might also be appropriate.

Re: 04/26/2020 openssl smime question...

2020-04-26 Thread Salz, Rich via openssl-users
* I have seen scripts that have the openssl smime option of -inform, or -outform set to DEM. That’s an error. PEM or DER. Interesting mixup. :)

04/26/2020 openssl smime question...

2020-04-26 Thread TOSH MITSUYA
I have seen scripts that have the openssl smime option of -inform, or -outform set to DEM. The documentation for these options cite PEM, DER or SMIME as valid values. Does anyone know where I can find an explanation for DEM? Is it another type of encoding? Thank you, TM