diff options
| author | David Cooper <david.cooper@nist.gov> | 2017-08-18 15:27:19 +0200 |
|---|---|---|
| committer | Matt Caswell <matt@openssl.org> | 2018-01-24 19:30:31 +0100 |
| commit | b4dd21a7b8b850a39b0f610fceca21557853c943 (patch) | |
| tree | fa51e54fae522f19759f48211061263a8c7b8758 /util | |
| parent | Fix error-path memory leak in asn_mime.c (diff) | |
| download | openssl-b4dd21a7b8b850a39b0f610fceca21557853c943.tar.xz openssl-b4dd21a7b8b850a39b0f610fceca21557853c943.zip | |
Add -rsigopt option to ocsp command
Add a -rsigopt option to the ocsp command that allows signature parameters to be provided for the signing of OCSP responses. The parameters that may be provided to -rsigopt are the same as may be provided to -sigopt in the ca, req, and x509 commands.
This PR also defines a OCSP_basic_sign_ctx() function, which functions in the same way as OCSP_basic_sign(), except that it accepts a EVP_MD_CTX rather than a key and digest. The OCSP_basic_sign_ctx() function is used to implement the -rsigopt option in the ocsp command.
Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/4190)
Diffstat (limited to 'util')
| -rw-r--r-- | util/libcrypto.num | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/util/libcrypto.num b/util/libcrypto.num index d6fbd14043..3e7d28e167 100644 --- a/util/libcrypto.num +++ b/util/libcrypto.num @@ -4500,3 +4500,4 @@ ADMISSIONS_get0_professionInfos 4440 1_1_1 EXIST::FUNCTION: ADMISSION_SYNTAX_new 4441 1_1_1 EXIST::FUNCTION: EVP_sha512_256 4442 1_1_1 EXIST::FUNCTION: EVP_sha512_224 4443 1_1_1 EXIST::FUNCTION: +OCSP_basic_sign_ctx 4444 1_1_1 EXIST::FUNCTION:OCSP |