EVP_PKEY_pairwise_check(3) fails with error:0300009A:digital envelope routines::no key set

[Tomas Mraz]

On Sat, 2022-05-28 at 19:12 -0700, Kip Warner wrote:
> Hey list,
> 
> I am in the process of porting some RSA related code that used
> OpenSSL
> 1.1.1 to the newer 3.0 API. A lot of the functions I was using are
> now
> deprecated. I've tried to follow the migration guide as best I can.
> 
> Right now I am having an issue generating an RSA key pair:
> 
>    https://pastebin.com/jbLdqUdv
> 
> Note that the call to EVP_PKEY_pairwise_check(3) fails on L66 with
> "error:0300009A:digital envelope routines::no key set". This error
> string was set by OpenSSL internally.
> 
> I'm not sure exactly what I'm doing wrong. All I want to do is
> generate
> the RSA key pair and then verify that this was done correctly.

For the pairwise check, you need to initialize a new EVP_PKEY_CTX
context with EVP_PKEY_CTX_new_from_pkey().

You cannot reuse the key generation context.

-- 
Tomáš Mráz, OpenSSL