Questions tagged [openssl-engine]

49 questions
7
votes
1 answer

Attach an ENGINE context to a SSL_CTX

I am wondering if there is a possibility to attach an ENGINE* implementation to a SSL_CTX* and/or SSL* structures. What I want to achieve is to have a SSL_CTX* that will be set with the default cryptographic operations builtin in OpenSSL and another…
user1990164
  • 101
  • 1
  • 4
5
votes
0 answers

How to reload key from HSM by using openssl?

I'm using HSM via pkcs11 openssl engine. ENGINE_load_private_key() is used to load keys to use. It works fine, except after key pair generation: After generating a new key-pair to HSM, ENGINE_load_private_key() still returns the old…
SKi
  • 7,243
  • 21
  • 49
4
votes
1 answer

Link to ENGINE_load_private_key in OpenSSL function

I am developing a sample OpenSSL Engine for my application. #include static const char *engine_id = "sample"; static const char *engine_name = "developed by Devang"; static int engine_init(ENGINE *e); static EVP_PKEY…
user152494
  • 41
  • 3
4
votes
0 answers

RSA engine is not using the functions mentioned in struct

I am new to making engines in openssl. Basically I want to implement an OpenSSL RSA engine that uses the functions I mentioned while encrypting and decrypting. My engine compiles and loads but it seems that it is not using the functions I want it to…
Khurram
  • 71
  • 3
4
votes
0 answers

RSA encryption and BSD cryptodev engine

I'm trying to encrypt a string on an embedded system running on linux using OpenSSL. The system uses imx6ul microprocessor. It consists with a hardware crypto engine. root@imx6ulevk:/# openssl version OpenSSL 1.0.2d 9 Jul 2015 root@imx6ulevk:/#…
thilinaur
  • 141
  • 5
3
votes
0 answers

SSL connection using SSLEngine in Android Oreo and above

I followed this java example to create an SSL connection between a client and a server, specifically these two files SSLProvider and NioSSLProvider. The code works fine with Android 7 and below but with an internal implementation change in Android 8…
PunK _l_ RuLz
  • 611
  • 5
  • 20
3
votes
1 answer

javax.net.ssl.SSLException - the trustAnchors parameter must be non-empty

When I try to run ./gradlew run I keep getting: Downloading https://services.gradle.org/distributions/gradle-4.4.1-bin.zip Exception in thread "main" javax.net.ssl.SSLException: java.lang.RuntimeException: Unexpected error:…
Gavriil
  • 37
  • 1
  • 2
  • 7
3
votes
1 answer

OpenSSL engine for CUDA on Windows

How can I add some new functionalities to the OpenSSL API in order to use the GPU for some cryptographic algorithms (AES, RSA, etc) written by me? I'd want, for example, to use the command openssl -engine cuda_engine genrsa -out rsa.key 1024 and the…
Dani Grosu
  • 490
  • 4
  • 20
2
votes
1 answer

ConscryptEngine data read issue : Unable to parse TLS packet header

Below i the code for unwrap the data packets received from sslengine : private ByteBuffer doUnwrap() throws IOException { if (mPeerNetData.position() == 0) { // The network input buffer is empty; read data from the channel before…
Ashok Kumar
  • 1,052
  • 9
  • 12
2
votes
0 answers

Load OpenSSL custom engine in C/C++

I'm creating a custom OpenSSL engine for an ARM board, to be used in applications that are already linking to libssl. However, I need to tell the application to load this custom engine and use it. I'm only able to find the command line for openssl.…
Fernando
  • 1,287
  • 1
  • 10
  • 28
2
votes
1 answer

Signing a Certificate Signing Request using a CA stored on a Yubikey

I want to sign a Certificate Signing Request using the private key & the certificate stored in the PIV Digital Signature slot. I'm using the latest release of OpenSC for MacOS(https://github.com/OpenSC/OpenSC/releases/tag/0.19.0). I have tried the…
Supreet
  • 136
  • 1
  • 12
2
votes
0 answers

Implementing ECDH engine in OpenSSL 1.1.1

I am trying to write an OpenSSL Engine with ECDH support. I am following this page on the OpenSSL wiki : https://wiki.openssl.org/index.php/Creating_an_OpenSSL_Engine_to_use_indigenous_ECDH_ECDSA_and_HASH_Algorithms. However it is based on version…
2
votes
0 answers

The below code is working very fine for the detached signature!! How to get attached signature?

The result that I am getting in final is detached signature but my requirement is to get the attached signature.I must sign with my CSR file to get the attached signature using openssl.I have gone through a lot of websites but no one has provided…
Pavan Kumar
  • 37
  • 10
2
votes
1 answer

OpenSSL debugging - how to dump intermediate ASN.1 inside openssl?

I have a PKCS#12 test file with a single entry encrypted with PBES2 (PBEWithHmacSHA256AndAES_256) that is not working inside OpenSSL (but works elsewhere). So I'm trying to figure out if my file is broken or if OpenSSL is unable to handle PBES2…
rustyx
  • 62,971
  • 18
  • 151
  • 210
2
votes
0 answers

MAC Keychain tool integration with OpenSSL

We already have visited the link at OpenSSL and Apple Keychain integration, but didn't found anything about engine. Also the question asked in above link is too old. Is there any implementation of such type of engine till now or not?
User1234
  • 1,341
  • 3
  • 17
  • 30
1
2 3 4