[openssl-users] Raw EC key to EVP_PKEY to certificate

Viktor Dukhovni openssl-users at dukhovni.org
Sat Dec 31 01:27:38 UTC 2016


> On Dec 30, 2016, at 8:20 PM, Ken Goldman <kgoldman at us.ibm.com> wrote:
> 
> - EC_KEY ecKey = EC_KEY_new_by_curve_name(NID_X9_62_prime256v1)
> - convert x and y from bin to bignum
> - EC_KEY_set_public_key_affine_coordinates(ecKey, x, y)
> - EVP_PUBKEY evpPubkey = EVP_PKEY_new()
> - EVP_PKEY_set1_EC_KEY(evpPubkey, ecKey);
> - X509_set_pubkey(x509Certificate, evpPubkey);

Start with:

	EC_KEY *eckey = EC_KEY_new();
	EC_GROUP *group = EC_GROUP_new_by_curve_name(NID_X9_62_prime256v1);
	EC_GROUP_set_asn1_flag(group, OPENSSL_EC_NAMED_CURVE);
        EC_KEY_set_group(eckey, group);
	...

-- 
	Viktor.



More information about the openssl-users mailing list