Re: [openssl-users] Problems on authentication during TLS handshake

2019-01-08 Thread Jin Xie
Agreed. I use this as my engine sample and rewrite it to support OpenSSL 1.1 since this repo only works in OpenSSL 1.0.2. This takes a long time. Moreover very appreciated the support from everyone and Viktor, it's *important *to use public key in SSL_CTX_use_PrivateKey(). Now my engine is working

Re: [openssl-users] Problems on authentication during TLS handshake

2019-01-08 Thread Antonio Iacono
Il giorno mar 8 gen 2019 alle ore 19:32 Jin Xie ha scritto: > Thank you! I would have a try. > > Look here: https://github.com/MicrochipTech/cryptoauth-openssl-engine Antonio -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] Problems on authentication during TLS handshake

2019-01-08 Thread Jin Xie
Thank you! I would have a try. On Tue, Jan 8, 2019 at 1:10 AM Viktor Dukhovni wrote: > On Tue, Jan 08, 2019 at 12:38:32AM -0800, Jin Xie wrote: > > > As for “in which case it will use the public key as a stand-in for the > > missing private key”, do you mean use “client cert public key” instead

Re: [openssl-users] Problems on authentication during TLS handshake

2019-01-08 Thread Viktor Dukhovni
On Tue, Jan 08, 2019 at 12:38:32AM -0800, Jin Xie wrote: > As for “in which case it will use the public key as a stand-in for the > missing private key”, do you mean use “client cert public key” instead of > “client cert private key”? If so is it possible that I pass “client cert > public key” in

Re: [openssl-users] Problems on authentication during TLS handshake

2019-01-08 Thread Jin Xie
possible that I pass “client cert public key” in “SSL_CTX_use_PrivateKey_file”? (I’m running on 1.1 : ) Thanks, Jim From: Viktor Dukhovni Sent: Tuesday, January 8, 2019 12:05 AM To: openssl-users@openssl.org Subject: Re: [openssl-users] Problems on authentication during TLS handshake On Mon

Re: [openssl-users] Problems on authentication during TLS handshake

2019-01-08 Thread Viktor Dukhovni
On Mon, Jan 07, 2019 at 11:43:47PM -0800, Jin Xie wrote: [ Going forward, please try to post plain-text with regular spaces, rather than Unicode non-breaking spaces. ] >// load client-side cert and key, signed by intermediate cert >SSL_CTX_use_certificate_file(m_ctx, ClientCerti

[openssl-users] Problems on authentication during TLS handshake

2019-01-07 Thread Jin Xie
Hello everyone, I’m new at OpenSSL programming and encountered a problem while build TLS connection. I’m working on a crypto chip ATECC508A. So the client private key is stored in the chip and no way to get it out. However during standard TLS handshake, I need to provide client private key by “