[openssl-dev] custom X509_LOOKUP_METHOD in openssl 1.1.0 / load cert from memory

Sebastian Andrzej Siewior openssl-dev at ml.breakpoint.cc
Thu Sep 15 18:41:30 UTC 2016


Hi,

I've been looking at spice-gtk to get it compiled against openssl 1.1.0.
One problem I have is that they are using a custom X509_LOOKUP_METHOD
struct which is now not possible.
It seems that this requirement was introduced [1] to able to load certs
from within memory instead from file.

Is there another way to get this done in 1.1.0 or would you consider
providing X509_LOOKUP_mem() which is a struct similar to what they have
now in tree?

[0] https://cgit.freedesktop.org/spice/spice-gtk/tree/src/spice-channel.c#n2355
[1] https://cgit.freedesktop.org/spice/spice-gtk/commit/?id=1625aef30129d1961bead56bfcc1727ed46d1df3

Sebastian


More information about the openssl-dev mailing list