[Openvpn-devel] [PATCH v5 2/2] Add unit tests for engine keys

2020-05-24 Thread James Bottomley
Testing engines is problematic, so one of the prerequisites built for the tests is a simple openssl engine that reads a non-standard PEM guarded key. The test is simply can we run a client/server configuration with the usual sample key replaced by an engine key. The trivial engine prints out some

[Openvpn-devel] [PATCH v5 1/2] openssl: add engine method for loading the key

2020-05-24 Thread James Bottomley
As well as doing crypto acceleration, engines can also be used to load key files. If the engine is set, and the private key loading fails for bio methods, this patch makes openvpn try to get the engine to load the key. If that succeeds, we end up using an engine based key. This can be used with

[Openvpn-devel] [PATCH v5 0/2] add engine keys

2020-05-24 Thread James Bottomley
This update tries to cope with the fact that the test engine dynamic extension is different on macos (.dylib) and linux (.so) by dynamically building the openssl.cnf file with the correct one Note: I don't have any MacOS machines to test this on, so I only know it works on Linux if someone with a

[Openvpn-devel] [PATCH v5 0/2] add engine keys

2020-05-24 Thread James Bottomley
This update tries to cope with the fact that the test engine dynamic extension is different on macos (.dylib) and linux (.so) by dynamically building the openssl.cnf file with the correct one Note: I don't have any MacOS machines to test this on, so I only know it works on Linux if someone with a