RE: Setting a group to an existing EVP_PKEY in OpenSSL 3

2022-10-24 Thread Martin via openssl-users
curve, 0; Please note that that I have not tested the above code as my code uses key-from-data. But I think it should work. On Oct 24, 2022, at 2:31 PM, Martin via openssl-users mailto:openssl-users@openssl.org> > wrote: Hi, How can I set a GROUP to an existing

Setting a group to an existing EVP_PKEY in OpenSSL 3

2022-10-24 Thread Martin via openssl-users
Hi, How can I set a GROUP to an existing EC type EVP_PKEY in OpenSSL 3? In 1.0.2 I was using this code having the EC_KEY: EC_KEY_set_group(eckey, EC_GROUP_new_by_curve_name(nid)); In OpenSSL 3 still EC_GROUP_new_by_curve_name(nid) can be used, but I don't know how to go from that to

OpenSSL 3 ECC Key use question

2022-10-23 Thread Martin via openssl-users
Hi, How can I get the nid from the curve name for a EC key in OpenSSL 3? I'm porting code from OpenSSL 1.0.2. I'm converting this: ecc_curve_type = EC_GROUP_get_curve_name(EC_KEY_get0_group((const EC_KEY *)eckey)); if(ecc_curve_type == NID_undef) { to EVP_PKEY_get_utf8_string_

req command with -multivalue-rdn set

2021-04-19 Thread Alberto Martin via openssl-users
I'm trying to create a certificate request with a multivalue RDN which involves CN+UID. I achieved the encoded multi-value RDN, but I want the UID being encoded first and then the CN. I always get the CN first, no matter what I put in the -subj "/CN=value+UID=value" or "/UID=value+CN=value". Changi