Hi ,
I am trying to generate a CSR using EC and wanted to have signature
algorithm as ?ecdsa-with-SHA512?.
But in the generated csr I am getting signature algorithms as ?Signature
Algorithm: ecdsa-with-SHA1? always.
Open ssl version : 1.0.1
It would be great if you can help me on this.
Code below:
int generate_csr()
{
EVP_PKEY *privkey;
if ((privkey = EVP_PKEY_new()) == NULL) {
printf("Cannot allocate memory for private key.\n");
exit(1);
}
EC_KEY *eckey;
printf("Generating ECC keypair...\n");
eckey = EC_KEY_new();
if (NULL == eckey) {
printf("Failed to create new EC Key\n");
return -1;
}
EC_GROUP *ecgroup = EC_GROUP_new_by_curve_name(NID_secp521r1);
if (NULL == ecgroup) {
printf("Failed to create new EC Group\n");
return -1;
}
int set_group_status = EC_KEY_set_group(eckey, ecgroup);
const int set_group_success = 1;
if (set_group_success != set_group_status) {
printf("Failed to set group for EC Key\n");
return -1;
}
if (!EC_KEY_generate_key(eckey)) {
printf("Failed to generate EC Key\n");
exit(1);
}
if (!EVP_PKEY_assign_EC_KEY(privkey, eckey)) {
printf("Cannot assign keypair to private key.\n");
exit(1);
}
X509_REQ *req;
if ((req = X509_REQ_new()) == NULL) {
printf("Cannot allocate memory for certificate request.\n");
exit(1);
}
X509_NAME * name;
name = X509_REQ_get_subject_name(req);
X509_NAME_add_entry_by_txt(name, "CN", MBSTRING_ASC, (unsigned char *)
"alice", -1, -1, 0);
X509_NAME_add_entry_by_txt(name, "emailAddress", MBSTRING_ASC, (unsigned
char *)"alice at darkmatter.ae", -1, -1, 0);
X509_REQ_set_pubkey(req, privkey);
if (!X509_REQ_sign(req, privkey, EVP_ecdsa())) {
printf("Cannot sign request.\n");
exit(1);
}
const char *keyfn = "/Users/abhilash/test/csr_sample/tempkey.der";
const char *csrfn = "/Users/abhilash/test/csr_sample/tempcsr.der";
// write to files ...
FILE * f;
f = fopen(keyfn, "w");
i2d_PrivateKey_fp(f, privkey);
fclose(f);
f = fopen(csrfn, "w");
i2d_X509_REQ_fp(f, req);
fclose(f);
return 0;
}
Thanks,
Abhilash.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20160717/521b2408/attachment.html>
