[xmlsec] OpenSSL Gost support - final patch

[Dmitry Belyavsky]

Greetings!

On Thu, Sep 8, 2011 at 8:43 PM, Roumen Petrov <xmlsec at roumenpetrov.info> wrote:
> Dmitry Belyavsky wrote:
>>
>> Greetings!
>>
>> It seems to work. It's compatible with example provided before
>> (xmlsec1 --verify --trusted-pem tests/keys/gost2001ca.pem
>> --verification-time "2006-04-01 00:00:00"
>> tests/aleksey-xmldsig-01/enveloped-gost.xml is successful) and
>> self-compatible.
>>
>> On Wed, Sep 7, 2011 at 2:32 AM, Aleksey Sanin<aleksey at aleksey.com>  wrote:
>>
>>>
>>> [SNIP]
>>>
>
>
> Which openssl version for first time offer GOST support, even as externally
> maintained patch ?
>
>
> If first is 0.9.8 I think that xmlsec regression test could be automated .

Unfortunately, no. You need 1.0 version with gost engine enabled
through the openssl.cnf file according to README.gost file.

BTW, does anybody really need th pre-0.9.8 version of the OpenSSL
library (and its support)?



-- 
SY, Dmitry Belyavsky