osf-contact Striking out everywhere
Erik Madsen
emadsen at hbmachining.com
Mon Jun 3 19:54:46 UTC 2019
any thoughts here?
On 6/3/19 10:03 AM, Erik Madsen wrote:
> Is there any possibility of setting second argument here from config?
>
> SSL_CTX_set_client_cert_engine (SSL_CTX * ctx, ENGINE * )
>
> I think at this point it's a Node issue not allowing for an engine to
> be used for the key...I know GOST works, but pretty sure that allows
> for a PrivateKey to be set.
>
> I am almost 100% that node is getting the cert, but failing to get the
> key from the engine, so it's throwing the error "no client cert
> method" and according to strace, my engine is loading, but this call
> in Node crypto is setting engine fine, but in the TLS connection,
> there is no PEM formatted key.
>
> One would think if cURL and s_client can work, NodeJs should also...
>
> It will probably end up being something silly :O
>
> Thanks,
>
> Erik
> ------------------------------------------------------------------------
> *From:* Viktor Dukhovni
> *Sent:* Mon Jun 03 09:40:15 PDT 2019
> *To:* openssl-users at openssl.org
> *Subject:* Re: osf-contact Striking out everywhere
>
> On Mon, Jun 03, 2019 at 04:41:47PM +0100, Matt Caswell wrote:
>
> On 03/06/2019 15:16, Erik Madsen wrote:
>
> Thanks for the reply! Is there any link for avail variables
> for openssl.conf?
>
> See: https://www.openssl.org/docs/man1.1.1/man5/config.html
>
> [ssl_section] KeyForm = ENG no success...but at this point,
> honestly just scrambling.
>
>
> KeyForm is not a defined parameter for the SSL module. The
> supported parameters are listed in:
>
> https://www.openssl.org/docs/man1.1.1/man3/SSL_CONF_cmd.html
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20190603/b529034e/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ficbjipkcfbehdho.png
Type: image/png
Size: 19446 bytes
Desc: not available
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20190603/b529034e/attachment-0001.png>
More information about the openssl-users
mailing list