Re: DH_generate_key

2020-12-10 Thread Matt Caswell
= NULL; >> ? //CApkey = load_key(CAkeyfile, CAkeyformat, 0, passin, e, "CA >> Private Key"); >> ? bio = BIO_new_file(CAkeyile, "r"); >> ? CApkey = PEM_read_bio_PrivateKey(bio, NULL, NULL, passin); >> ? BIO_free(bio); >> >> ? EVP_PKEY_c

Re: DH_generate_key

2020-12-10 Thread Narayana, Sunil Kumar
crt); > ? X509_STORE_CTX_set_flags(xsc, X509_V_FLAG_CHECK_SS_SIGNATURE); > > ? if (!X509_check_private_key(xca, CApkey)) ; > > ? if (!X509_set_issuer_name(crt, X509_get_subject_name(xca))); > ? if (!X509_set_serialNumber(crt, serialno)); > > ? int days = 365; > ? if (X509_

Question about SSL_ERROR_WANT_WRITE

2020-12-10 Thread Cosmin Apreutesei
Hello, I have a question regarding SSL_write() and returning SSL_ERROR_WANT_WRITE from the write callback. _After_ SSL_write() returns with SSL_ERROR_WANT_WRITE (because my write callback returned SSL_ERROR_WANT_WRITE), can I _then_ send the data given to the calback and then call SSL_write() ag

Re: DH_generate_key

2020-12-10 Thread Matt Caswell
On 09/12/2020 15:31, Matt Caswell wrote: >> our application creates a new DH and using DH_generate_key() > > How do you set up the DH parameters? Do you load them from a file or > generate them in your application? Or some other way? Will it break your > application if you swap to using differe

Re: creating certificate by code / problems to load via openssl x509 / pem format

2020-12-10 Thread Tomas Mraz
On Thu, 2020-12-10 at 10:39 +0100, Andreas Tengicki wrote: > The solution was to choice a EVP by signing the certificate > > i = X509_sign(x, CApkey, EVP_sha256()); I do not really think this was the problem. In the code below you do not set the notBefore time which is actually indicated by the p

Re: creating certificate by code / problems to load via openssl x509 / pem format

2020-12-10 Thread Andreas Tengicki
The solution was to choice a EVP by signing the certificate i = X509_sign(x, CApkey, EVP_sha256()); Best regards   Andreas Am 09.07.2020 um 11:09 schrieb Andreas Tengicki: Hello, your first help in this project, helps much, but now some weeks later, there is a new problem, and I cannot fin