Greetings! Sorry, I don't understand. The Gost algorithm is DSA-like, not RSA-like. Why should I implement the rsa-like transport?..
Thank you! On Thu, Aug 18, 2011 at 11:05 PM, Aleksey Sanin <[email protected]> wrote: > Yes. You don't need to do X509 certs but you need to define a key to use > with the gost algorithm :) > > Aleksey > > > On 8/18/11 12:03 PM, Dmitry Belyavsky wrote: >> >> Greetings! >> >> Do you mean smth similar to src/openssl/kt_rsa.c? >> I hope I don't need it using the X509 cert format. Am I wrong? >> >> On Thu, Aug 18, 2011 at 10:43 PM, Aleksey Sanin<[email protected]> >> wrote: >>> >>> You also need to implement key type for gost keys. Take a look at how >>> RSA keys are done. >>> >>> Aleksey >>> >>> >>> On 8/18/11 11:39 AM, Dmitry Belyavsky wrote: >>>> >>>> Greetings! >>>> >>>> I'm implementing the Russian GOST support to OpenSSL-builded XMLSec. I >>>> have some questions. >>>> >>>> 1. The support is expected to be in X.509 format only. I hope that >>>> linking against OpenSSL 1.0 will work good enough after I implement >>>> the necessary transforms. When I run make check, I get the following: >>>> >>>> >>>> Test: /aleksey-xmldsig-01/enveloped-gost (success) >>>> /home/beldmit/xmlsec1-1.2.18/apps/xmlsec1 check-transforms --crypto >>>> openssl --crypto-config /tmp/xmlsec-crypto-config enveloped-signature >>>> gostr34102001-gostr3411 gostr3411 >>>> Transforms "enveloped-signature" found >>>> Transforms "gostr34102001-gostr3411" found >>>> Transforms "gostr3411" found >>>> /home/beldmit/xmlsec1-1.2.18/apps/xmlsec1 check-key-data --crypto >>>> openssl --crypto-config /tmp/xmlsec-crypto-config gost >>>> Error: key data "gost" not found >>>> >>>> How can I fix it? >>>> >>>> 2. I configure XMLSec with >>>> >>>> ./configure --with-openssl=/usr --with-pic=yes --enable-gost >>>> But it seems to use static linking instead of using dynamic. How can I >>>> fix >>>> it? >>>> >>>> Thank you! >>>> >> >> > -- SY, Dmitry Belyavsky _______________________________________________ xmlsec mailing list [email protected] http://www.aleksey.com/mailman/listinfo/xmlsec
