Re: osf-contact Striking out everywhere

[Erik Madsen <emadsen@xxxxxxxxxxxxxxx>]

any thoughts here?

On 6/3/19 10:03 AM, Erik Madsen wrote:

Is there any possibility of setting second argument here from config?

SSL_CTX_set_client_cert_engine (SSL_CTX * ctx, ENGINE * )

I think at this point it's a Node issue not allowing for an engine to be used for the key...I know GOST works, but pretty sure that allows for a PrivateKey to be set.

I am almost 100% that node is getting the cert, but failing to get the key from the engine, so it's throwing the error "no client cert method" and according to strace, my engine is loading, but this call in Node crypto is setting engine fine, but in the TLS connection, there is no PEM formatted key.

One would think if cURL and s_client can work, NodeJs should also...

It will probably end up being something silly :O

Thanks,

Erik

---

From: Viktor Dukhovni
Sent: Mon Jun 03 09:40:15 PDT 2019
To: openssl-users@xxxxxxxxxxx
Subject: Re: osf-contact Striking out everywhere

On Mon, Jun 03, 2019 at 04:41:47PM +0100, Matt Caswell wrote:

 On 03/06/2019 15:16, Erik Madsen wrote:

 Thanks for the reply! Is there any link for avail variables for openssl.conf? 
 
 See:
 
 https://www.openssl.org/docs/man1.1.1/man5/config.html
 
 
 [ssl_section]
 KeyForm = ENG
 
 no success...but at this point, honestly just scrambling.

KeyForm is not a defined parameter for the SSL module.  The
supported parameters are listed in:

    https://www.openssl.org/docs/man1.1.1/man3/SSL_CONF_cmd.html