[openssl-dev] [openssl.org #4518] OpenSSL-1.1.0-pre5 RSA_set0_key and related RSA_get0_*, RSA_set0_*, DSA_set0_* and DSA_get0_* problems

Roumen Petrov openssl at roumenpetrov.info
Tue Apr 26 20:17:50 UTC 2016


Hello Richard,

Richard Levitte wrote:
> In message <571F2941.4040004 at openssl.org> on Tue, 26 Apr 2016 09:39:29 +0100, Matt Caswell <matt at openssl.org> said:
>
> [SNIP]
> I've seen no other opinion, so I went with it.  Would you mind having
> a look at GH#995?  I did a bit of change in the docs, but could need
> some help expressing it in a better manner.
>
> Also, I'd like to hear from Douglas and Tomas if these changes found
> in said pull request would fit your bill better...  basically, it
> allows (or should allow, unless I've goofed something up) a call set
> like this:
>
>      RSA_set0_key(rsa, n, e, NULL);
>      /* other stuff done, such as calculatig d */
>      RSA_set0_key(rsa, NULL, NULL, d);
As methods allows user to set only public part I would like to propose 
to add new key method "...set0_privkey" to set just private key.
This will allow to avoid duplicate of key public part between get0 and 
set0 key methods.


For protocol "0009-sshkey.c-opaque-DSA-structure.patch" is practical 
sample of an upgrade to 1.1 API. RSA is similar.

>
> Cheers,
> Richard
>

Roumen

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0009-sshkey.c-opaque-DSA-structure.patch
Type: text/x-diff
Size: 9764 bytes
Desc: not available
URL: <http://mta.openssl.org/pipermail/openssl-dev/attachments/20160426/3be4c56a/attachment.patch>


More information about the openssl-dev mailing list