Re: Creating a CSR using OpenSSL v1.1.1

2021-10-12 Thread David von Oheimb
On 13.10.21 01:32, Philip Prindeville wrote: Is there demo code for creating a CSR? demos/x509/mkreq.c seems to have gone away a while ago... Thanks! What I generally take as demo/sample code is the OpenSSL apps implementation in apps/ , though that can be rather complicated due to many

Re: Creating a CSR using OpenSSL v1.1.1

2021-10-12 Thread David von Oheimb
On 13.10.21 01:32, Philip Prindeville wrote: Is there demo code for creating a CSR? demos/x509/mkreq.c seems to have gone away a while ago... Thanks! What I generally take as demo/sample code is the OpenSSL apps implementation in apps/ , though that can be rather complicated due to many

Re: Creating a CSR using OpenSSL v1.1.1

2021-10-12 Thread Philip Prindeville
> On Apr 29, 2021, at 8:15 AM, Matt Caswell wrote: > > > On 29/04/2021 15:04, Joe Eremita wrote: >> datasig_len = i2d_X509_REQ_INFO( req->req_info, NULL ); > > You can achieve this by instead doing: > > datasig_len = i2d_re_X509_REQ_tbs(req, NULL); > > See: > >

openssl 3.0.0 get ECC public key modulus from EVP_PKEY

2021-10-12 Thread Ken Goldman
In pre-3.0.0, I used this, omitting the error checking, malloc, ... ecPoint = EC_KEY_get0_public_key(ecKey); ecGroup = EC_KEY_get0_group(ecKey); EC_POINT_point2oct(ecGroup, ecPoint, POINT_CONVERSION_UNCOMPRESSED,

ODP: Store Mgmt and keys loading ( keyform ENG )

2021-10-12 Thread Piotr Lobacz
I'm sorry i cannot help you with providers. All i can tell you, is that in my case libpkcs11 was not setting using RSA_meth_set_flags but RSA_set_flags and in dotnet openssl implementation, the check was being made on the method. I was thinking that our issues may be related. BR Piotr

Re: Store Mgmt and keys loading ( keyform ENG )

2021-10-12 Thread Antonio Santagiuliana
in general, I think that despite what I read in previous replies, with the operation: dgst --provider=myprovider -sign handle:1 is not possible to fully reproduce what was possible with engines : dgst -keyform ENG sign -in 1 -engine=myengine. In the case of provider the store manager's caller sets

Re: Store Mgmt and keys loading ( keyform ENG )

2021-10-12 Thread Antonio Santagiuliana
Thank you for the suggestion. I am using providers though, not engine, and I can't see the higher level checking this RSA flags before it has detected a valid key is passed back from the store manager to ossl_store_handle_load_result() ( the callback passed to the store mgmt load() method). If I