[openssl-dev] [openssl.org #3676] Resolved: [PATCH] Export ASN1 templates for DH and ECDH groups

Dr. Matthias St. Pierre via RT rt at openssl.org
Wed Mar 9 23:50:40 UTC 2016

> According to our records, your request has been resolved. If you have any
> further questions or concerns, please respond to this message.

Thanks a lot for finally adding the patch. Since our software is not ready for version 1.1
yet, I can't try it directly with the master, but I will backport it for us to 1.0.2.

Reviewing the commit everything looks perfect, except for a small omission: You probably
overlooked the changes for exporting the DHparameters. According to Stephen,

> The fact we don't export the DHparameters item I'd regard as a bug which should be fixed.

Essentually it's the following changes to dh.h and libcrypto.num (formerly libeay.num), which are missing:


+#include <openssl/asn1.h>


+DHparams_it                             <number>   1_1_0 EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:DH
+DHparams_it                             <number>   1_1_0 EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:DH

Matthias St. Pierre

Ticket here: http://rt.openssl.org/Ticket/Display.html?id=3676
Please log in as guest with password guest if prompted

More information about the openssl-dev mailing list