[openssl-dev] [openssl.org #3676] Resolved: [PATCH] Export ASN1 templates for DH and ECDH groups

Dr. Matthias St. Pierre via RT rt at openssl.org
Wed Mar 9 23:50:40 UTC 2016


> According to our records, your request has been resolved. If you have any
> further questions or concerns, please respond to this message.

Thanks a lot for finally adding the patch. Since our software is not ready for version 1.1
yet, I can't try it directly with the master, but I will backport it for us to 1.0.2.

Reviewing the commit everything looks perfect, except for a small omission: You probably
overlooked the changes for exporting the DHparameters. According to Stephen,

> The fact we don't export the DHparameters item I'd regard as a bug which should be fixed.

Essentually it's the following changes to dh.h and libcrypto.num (formerly libeay.num), which are missing:

include/openssl/dh.h:
====================

+#include <openssl/asn1.h>
...
+DECLARE_ASN1_ITEM(DHparams)


util/libcrypto.num:
==================

+DHparams_it                             <number>   1_1_0 EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:DH
+DHparams_it                             <number>   1_1_0 EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:DH



Regards,
Matthias St. Pierre


-- 
Ticket here: http://rt.openssl.org/Ticket/Display.html?id=3676
Please log in as guest with password guest if prompted



More information about the openssl-dev mailing list