Re: Best Practices for private key files handling

On 9/13/22 14:17, Philip Prindeville wrote: But what happens when the file we encounter is a symlink? If the symlink is owned by root but the target isn't, or the target permissions aren't 0600 0r 0400... Or the target is a symlink, or there's a symlink somewhere in the target path, etc. So

RE: Best Practices for private key files handling

> From: openssl-users On Behalf Of Philip > Prindeville > Sent: Tuesday, 13 September, 2022 14:17 > > I'm working on a bug in an application where the application config is given > the directory path in which to find a key-store, which it then loads. > > My issue is this: a regular UNIX file is

Best Practices for private key files handling

Hi, I'm working on a bug in an application where the application config is given the directory path in which to find a key-store, which it then loads. My issue is this: a regular UNIX file is trivial to handle (make sure it's owned by "root" or the uid that the app runs at, and that it's 0600 o

RE: Session ID is coming as NULL in openSSL 3.0.2 and TLS 1.2 version

Dear All, Openssl version used is 3.0.2 and TLS is 1.2 Currently in our product we are using "SSL_SESSION_get_id(SSL_get0_session((SSL *) m_pSsl), nullptr)" to get the SSL Session ID(session is getting created successfully). But the session ID is coming as NULL(00 00 00 00 00 00 00 00 00 00 00