[openssl-users] overload engine for openssl dgst -sign

[Dr. Stephen Henson]

On Mon, Aug 01, 2016, Syed Elec wrote:

> Hi everyone,
> 
> I'm currently working on an engine and I have a question about 'overload'
> the openssl dgst -sign ... command line using this engine.
> 
> I can overload the openssl dgst only (for digests) using ENGINE_set_digests
> but how overload the whole command openssl dgst -sign
> 
> for example :
> openssl dgst -md5 -binary -engine myengine -keyform engine -sign key.pem
> -out dgst.sig file
> 

You need to provide support for the appropriate public key algorithm e.g. an
RSA_METHOD. This can either be for general purpose acceleration of a key
specific method which is used only for keys loaded from that ENGINE.

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org