<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p><img src="cid:part1.BD2E70FF.5A428CC0@hbmachining.com" alt=""><br>
<br>
any thoughts here?<br>
</p>
<div class="moz-cite-prefix">On 6/3/19 10:03 AM, Erik Madsen wrote:<br>
</div>
<blockquote type="cite"
cite="mid:a4eec435-d997-4a2a-b638-afdd3ef95e31@hbmachining.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="auto">Is there any possibility of setting second
argument here from config?<br>
<br>
</div>
<div dir="auto">SSL_CTX_set_client_cert_engine (SSL_CTX * ctx,
ENGINE * )<br>
<br>
</div>
<div dir="auto">I think at this point it's a Node issue not
allowing for an engine to be used for the key...I know GOST
works, but pretty sure that allows for a PrivateKey to be set.<br>
<br>
</div>
<div dir="auto">I am almost 100% that node is getting the cert,
but failing to get the key from the engine, so it's throwing the
error "no client cert method" and according to strace, my engine
is loading, but this call in Node crypto is setting engine fine,
but in the TLS connection, there is no PEM formatted key.<br>
<br>
</div>
<div dir="auto">One would think if cURL and s_client can work,
NodeJs should also...<br>
<br>
</div>
<div dir="auto">It will probably end up being something silly :O<br>
<br>
</div>
<div dir="auto"><!-- tmjah_g_1299s -->Thanks,<!-- tmjah_g_1299e --><br>
<br>
</div>
<div dir="auto"><!-- tmjah_g_1299s -->Erik<!-- tmjah_g_1299e --></div>
<div
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";padding:3.0pt
0in 0in 0in">
<hr style="border:none;border-top:solid #E1E1E1 1.0pt">
<b>From:</b> Viktor Dukhovni <openssl-users@dukhovni.org><br>
<b>Sent:</b> Mon Jun 03 09:40:15 PDT 2019<br>
<b>To:</b> <a class="moz-txt-link-abbreviated" href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a><br>
<b>Subject:</b> Re: osf-contact Striking out everywhere<br>
</openssl-users@dukhovni.org></div>
<br>
<pre class="blue">On Mon, Jun 03, 2019 at 04:41:47PM +0100, Matt Caswell wrote:
<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"> On 03/06/2019 15:16, Erik Madsen wrote:
<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"> Thanks for the reply! Is there any link for avail variables for openssl.conf?
</blockquote>
See:
<a href="https://www.openssl.org/docs/man1.1.1/man5/config.html" moz-do-not-send="true">https://www.openssl.org/docs/man1.1.1/man5/config.html</a>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">
[ssl_section]
KeyForm = ENG
no success...but at this point, honestly just scrambling.
</blockquote></blockquote>
KeyForm is not a defined parameter for the SSL module. The
supported parameters are listed in:
<a href="https://www.openssl.org/docs/man1.1.1/man3/SSL_CONF_cmd.html" moz-do-not-send="true">https://www.openssl.org/docs/man1.1.1/man3/SSL_CONF_cmd.html</a>
</pre>
</blockquote>
</body>
</html>