Questions tagged [openssl-engine]

62 questions
7
votes
1 answer

Attach an ENGINE context to a SSL_CTX

I am wondering if there is a possibility to attach an ENGINE* implementation to a SSL_CTX* and/or SSL* structures. What I want to achieve is to have a SSL_CTX* that will be set with the default cryptographic operations builtin in OpenSSL and another…
user1990164
  • 101
  • 1
  • 4
5
votes
1 answer

Link to ENGINE_load_private_key in OpenSSL function

I am developing a sample OpenSSL Engine for my application. #include static const char *engine_id = "sample"; static const char *engine_name = "developed by Devang"; static int engine_init(ENGINE *e); static EVP_PKEY…
user152494
  • 51
  • 3
5
votes
0 answers

How to reload key from HSM by using openssl?

I'm using HSM via pkcs11 openssl engine. ENGINE_load_private_key() is used to load keys to use. It works fine, except after key pair generation: After generating a new key-pair to HSM, ENGINE_load_private_key() still returns the old…
SKi
  • 8,007
  • 2
  • 26
  • 57
4
votes
1 answer

OpenSSL debugging - how to dump intermediate ASN.1 inside openssl?

I have a PKCS#12 test file with a single entry encrypted with PBES2 (PBEWithHmacSHA256AndAES_256) that is not working inside OpenSSL (but works elsewhere). So I'm trying to figure out if my file is broken or if OpenSSL is unable to handle PBES2…
rustyx
  • 80,671
  • 25
  • 200
  • 267
4
votes
1 answer

javax.net.ssl.SSLException - the trustAnchors parameter must be non-empty

When I try to run ./gradlew run I keep getting: Downloading https://services.gradle.org/distributions/gradle-4.4.1-bin.zip Exception in thread "main" javax.net.ssl.SSLException: java.lang.RuntimeException: Unexpected error:…
Gavriil
  • 47
  • 1
  • 2
  • 7
4
votes
0 answers

RSA engine is not using the functions mentioned in struct

I am new to making engines in openssl. Basically I want to implement an OpenSSL RSA engine that uses the functions I mentioned while encrypting and decrypting. My engine compiles and loads but it seems that it is not using the functions I want it to…
Khurram
  • 71
  • 3
4
votes
0 answers

RSA encryption and BSD cryptodev engine

I'm trying to encrypt a string on an embedded system running on linux using OpenSSL. The system uses imx6ul microprocessor. It consists with a hardware crypto engine. root@imx6ulevk:/# openssl version OpenSSL 1.0.2d 9 Jul 2015 root@imx6ulevk:/#…
thilinaur
  • 141
  • 6
4
votes
1 answer

DSO support routines and multiple OpenSSL load errors

I want to build an OpenSSL RSA engine, starting from this existing source code file which is a faster method implemented by Intel. First of all I want to build this code so I'm using these commands: gcc -fPIC -m64 -o eng_rsax.o -c eng_rsax.c gcc…
Dani Grosu
  • 544
  • 1
  • 4
  • 22
3
votes
1 answer

Load OpenSSL custom engine in C/C++

I'm creating a custom OpenSSL engine for an ARM board, to be used in applications that are already linking to libssl. However, I need to tell the application to load this custom engine and use it. I'm only able to find the command line for openssl.…
Fernando
  • 1,477
  • 2
  • 14
  • 33
3
votes
0 answers

SSL connection using SSLEngine in Android Oreo and above

I followed this java example to create an SSL connection between a client and a server, specifically these two files SSLProvider and NioSSLProvider. The code works fine with Android 7 and below but with an internal implementation change in Android 8…
PunK _l_ RuLz
  • 621
  • 6
  • 20
3
votes
1 answer

OpenSSL engine for CUDA on Windows

How can I add some new functionalities to the OpenSSL API in order to use the GPU for some cryptographic algorithms (AES, RSA, etc) written by me? I'd want, for example, to use the command openssl -engine cuda_engine genrsa -out rsa.key 1024 and the…
Dani Grosu
  • 544
  • 1
  • 4
  • 22
2
votes
1 answer

Rename output dll & lib file in openssl 3.0

We are upgrading from openssl 1.0.2 to openssl 3.0. Earlier we were able to rename the output dll by editing lib name in following files. util\mkdef.pl util\pl\VC-32.pl (pl folder does not exists in openssl 3.0, i guess it is changed to…
2
votes
1 answer

ConscryptEngine data read issue : Unable to parse TLS packet header

Below i the code for unwrap the data packets received from sslengine : private ByteBuffer doUnwrap() throws IOException { if (mPeerNetData.position() == 0) { // The network input buffer is empty; read data from the channel before…
Ashok Kumar
  • 1,226
  • 1
  • 10
  • 14
2
votes
1 answer

OpenSSL can't establish SSL connection because unsupported protocol

I'm trying to build OpenCog from here and when I issue this command octool -rdcpav -l default It builds everything but it then gets to the step of installing Link-Grammar and this happens [octool] Installing Link-Grammar.... --2020-06-13…
Omar Khalid
  • 324
  • 1
  • 3
  • 15
2
votes
1 answer

Signing a Certificate Signing Request using a CA stored on a Yubikey

I want to sign a Certificate Signing Request using the private key & the certificate stored in the PIV Digital Signature slot. I'm using the latest release of OpenSC for MacOS(https://github.com/OpenSC/OpenSC/releases/tag/0.19.0). I have tried the…
Sprite
  • 350
  • 1
  • 5
  • 17
1
2 3 4 5