On Tue, Jan 08, 2019 at 12:38:32AM -0800, Jin Xie wrote: > As for “in which case it will use the public key as a stand-in for the > missing private key”, do you mean use “client cert public key” instead of > “client cert private key”? If so is it possible that I pass “client cert > public key” in “SSL_CTX_use_PrivateKey_file”? (I’m running on 1.1 :(((( ) With engines, you have to use ENGINE_load_private_key(), and then SSL_CTX_use_PrivateKey(). See the code in apps/s_client.c and load_key() in apps/apps.c. -- Viktor. -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
