Apps hang when openssl.cnf defines PKCS#11 engine

2019-07-23 Thread Blumenthal, Uri - 0553 - MITLL
It is weird. MacOS 10.14.6, Xcode-10.3, OpenSSL-1.1.1c (Macports-installed), current master of libp11. Symptoms: when PKCS#11 engine is defined, git hangs upon HTTPS retrieval. If I comment the engine out in openssl.cnf, or tell git to not load openssl.cnf - it works fine: $ openssl version

Re: Openssl binary with statically linked libssl and libcrypto

2019-07-23 Thread Michael Mueller
We are doing this for Linux. See below. Don't recall changing anything related to static build in transition from 1.0.2 to 1.1.1. For Windows we use the dlls. Noticed that new windows compile creates static libs, so we might convert to using the static libs.

Re: Error building app on RHEL 7 with openssl 1.1.1

2019-07-23 Thread Jan Just Keijser
Hi Mark, On 20/07/19 00:13, Mark Richter wrote: I figured out the variant issue and built, but the tests are failing - see https://gist.github.com/sf-mrichter/2c5c653b3800708c1a67ba41e4992129. Still not sure how to link an app to the new ssl that uses libraries that were built with the

Openssl binary with statically linked libssl and libcrypto

2019-07-23 Thread K Lengauer
Hi all, I am trying to build the 'openssl' binary with libssl and libcrypto linked statically because the end product may be used on a system where they are not available. I recently upgraded to OpenSSL v1.1.1c and previously used 1.0.2s which allowed me to get the 'openssl' binary with

Re: Engine updating a key's ex data in sign/encrypt method?

2019-07-23 Thread Matt Caswell
On 22/07/2019 17:44, Lynch, Andrew wrote: > Hi, > > I am wondering whether it is ok to update a key's ex data from within an > engine method that is using the key. This is with both OpenSSL 1.1.1a and > 1.0.2j. > > In my engine's load_privkey() method I connect to the HSM and obtain