[EMAIL PROTECTED] - Fri Feb 27 14:41:24 2004]:

> In message <[EMAIL PROTECTED]> on Fri, 27 Feb
> 2004 14:00:24 +0100 (MET), "Stephen Henson via RT" <[EMAIL PROTECTED]>
> said:
> 
> rt>
> rt> [levitte - Fri Feb 27 00:04:45 2004]:
> rt>
> rt> > I noticed the EVP_dss1() hack, and am pondering about something
> a bit
> rt> > mkore generic.  Could you test if the following line works?
> rt> >
> rt> >         evp_md = EVP_get_digestbynid(EVP_MD_nid(rkey));
> rt> >
> rt> > [guest - Mon Feb 23 18:13:00 2004]:
> rt> >
> rt> > > Attached file extend OCSP responder with:
> rt> > > - add support for dsa keys;
> rt> > > - set SO_REUSEADDR when system support it.
> rt> > >
> rt> > > What about attached patch ?
> rt> > > It is against 0.9.7b, but same fixes can be applied for
> 0.9.7c.
> rt> >
> rt>
> rt> Its only because both EVP_PKEY and EVP_MD structures both have a
> field
> rt> called "type" and that EVP_MD_nid() is a macro that it works.
> rt>
> rt> If ever EVP_MD_nid() was changed to a function bad things could
> happen.
> [...]
> rt> The applications currently access pkey->type directly for this
> kind of
> rt> thing.
> 
> So basically, you're saying that the following would be the right
> thing to do:
> 
>       evp_md = EVP_get_digestbynid(rkey->type);
> 

Yes it would. Though we should really have a macro or function in >0.9.8
so applications don't explicitly access the structure.

Steve.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to