<html><head></head><body><div dir="auto">Is there any possibility of setting second argument here from config?<br><br></div>
<div dir="auto">SSL_CTX_set_client_cert_engine (SSL_CTX * ctx, ENGINE * )<br><br></div>
<div dir="auto">I think at this point it's a Node issue not allowing for an engine to be used for the key...I know GOST works, but pretty sure that allows for a PrivateKey to be set.<br><br></div>
<div dir="auto">I am almost 100% that node is getting the cert, but failing to get the key from the engine, so it's throwing the error "no client cert method" and according to strace, my engine is loading, but this call in Node crypto is setting engine fine, but in the TLS connection, there is no PEM formatted key.<br><br></div>
<div dir="auto">One would think if cURL and s_client can work, NodeJs should also...<br><br></div>
<div dir="auto">It will probably end up being something silly :O<br><br></div>
<div dir="auto"><!-- tmjah_g_1299s -->Thanks,<!-- tmjah_g_1299e --><br><br></div>
<div dir="auto"><!-- tmjah_g_1299s -->Erik<!-- tmjah_g_1299e --></div>
<div style="font-size:10.0pt;font-family:"Tahoma","sans-serif";padding:3.0pt 0in 0in 0in">
<hr style="border:none;border-top:solid #E1E1E1 1.0pt">
<b>From:</b> Viktor Dukhovni <openssl-users@dukhovni.org><br>
<b>Sent:</b> Mon Jun 03 09:40:15 PDT 2019<br>
<b>To:</b> openssl-users@openssl.org<br>
<b>Subject:</b> Re: osf-contact Striking out everywhere<br>
</openssl-users@dukhovni.org></div>
<br>
<pre class="blue">On Mon, Jun 03, 2019 at 04:41:47PM +0100, Matt Caswell wrote:<br><br><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"> On 03/06/2019 15:16, Erik Madsen wrote:<br><br><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"> Thanks for the reply! Is there any link for avail variables for openssl.conf? <br></blockquote> <br> See:<br> <br> <a href="https://www.openssl.org/docs/man1.1.1/man5/config.html">https://www.openssl.org/docs/man1.1.1/man5/config.html</a><br> <br><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"> <br> [ssl_section]<br> KeyForm = ENG<br> <br> no success...but at this point, honestly just scrambling.<br></blockquote></blockquote><br>KeyForm is not a defined parameter for the SSL module. The<br>supported parameters are listed in:<br><br> <a href="https://www.openssl.org/docs/man1.1.1/man3/SSL_CONF_cmd.html">https://www.openssl.org/docs/man1.1.1/man3/SSL_CONF_cmd.html</a><br></pre></body></html>