Re: [openssl-users] Initialising OpenSSL more than once - how do we handle this?

2018-07-24 Thread Viktor Dukhovni
> On Jul 24, 2018, at 7:40 AM, Graham Leggett wrote: > > Or is it correct in v1.1.0 and above to just not initialise anything at all, > not clean anything up at all, and expect openssl to “do the right thing” when > mod_ssl is unloaded? Yes. And *especially* when the code that depends on

Re: [openssl-users] openssl asn1parse -length

2018-07-24 Thread Christian Böhme
On 24.07.2018 11:41, Jakob Bohm wrote: > Best option is to download the documents that specify the DER > (or BER) ASN.1 Encoding, which is the X.690 (2015) ITU-T > "recommendation" which was a freely downloadable PDF last time > I checked. […] > For example, the one you show below is thus: >

Re: [openssl-users] Initialising OpenSSL more than once - how do we handle this?

2018-07-24 Thread Graham Leggett
On 24 Jul 2018, at 12:15, Graham Leggett wrote: > Over at httpd we’re struggling with crashes and instability caused by > attempts by various independent libraries we link to, all of which in turn > link to openssl, initialising openssl multiple times. In turn these separate > libraries might

[openssl-users] Using a TPM to sign CSRs

2018-07-24 Thread Kaarthik Sivakumar
Hello I need to create a key pair using a TPM (proprietary) and build a CSR and sign it using it the TPM as well. Currently I dont have an engine interface to talk to the TPM. I do the following: 1. generate key pair in the TPM. private key is kept private in

[openssl-users] Initialising OpenSSL more than once - how do we handle this?

2018-07-24 Thread Graham Leggett
Hi all, Over at httpd we’re struggling with crashes and instability caused by attempts by various independent libraries we link to, all of which in turn link to openssl, initialising openssl multiple times. In turn these separate libraries might de-initialise openssl on shutdown expecting a

Re: [openssl-users] openssl asn1parse -length

2018-07-24 Thread Jakob Bohm
On 23/07/2018 16:56, Christian Böhme wrote: Hello all, I have been trying to find a way to ascertain that the contents of a file is a DER-encoded ASN.1 structure such as $ openssl version OpenSSL 1.0.2g 1 Mar 2016 $ openssl asn1parse -in ciphertext.der -inform DER -offset 0 -i 0:d=0