[openssl-users] Porting to OpenSSL 1.1
bero at lindev.ch
Mon Oct 10 22:56:06 UTC 2016
I'm porting some code to OpenSSL 1.1 -- for the most part, it's going well, but there's some things I'm not sure about:
- What replaces a direct access to "sha1_hash" in an X509? (found in Qt 5.7)
So far, haven't come up with a proper alternative to this. Should the code be refactored to use X509_issuer_and_serial_hash (which isn't quite the same, but should still give a unique hash)?
[this is from qHash -- so the purpose really is to get a unique hash of the contents]
- What's the best way to copy an EVP_PKEY?
Also from Qt 5.7:
rsa = RSA_new();
memcpy(rsa, EVP_PKEY_get1_RSA(pkey), sizeof(RSA));
[breaks because sizeof(RSA) is no longer known]
for EC, there's EC_KEY_dup -- for RSA and DSA, not so much.
- What's the proper successor to NETSCAPE_X509? (from kdelibs4support)
I presume this (the method KSSLCertificate::toNetscape()) can just be deleted because nothing should be using Netscape x509 anymore?
Outside of those, all problems I've run into so far were fairly easy to solve.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the openssl-users