[xmlsec] xmlsec + openssl + GOST2012: patch

Aleksey Sanin aleksey at aleksey.com
Sat Oct 11 10:39:26 PDT 2014


Sorry, didn't have time at all. I'll review it in the next couple weeks.

Aleksey

On 10/11/14, 9:19 AM, Dmitry Belyavsky wrote:
> Hello Aleksey,
> 
> Any comments?
> 
> Thank you!
> 
> On Fri, Oct 3, 2014 at 9:17 PM, Dmitry Belyavsky <beldmit at gmail.com
> <mailto:beldmit at gmail.com>> wrote:
> 
>     Hello Aleksey,
> 
>     I'll send you the current version of the patch providing GOST 2012
>     in openssl (the final version will be soon send to openssl lists, I
>     hope).
> 
>     On Fri, Oct 3, 2014 at 8:55 PM, Aleksey Sanin <aleksey at aleksey.com
>     <mailto:aleksey at aleksey.com>> wrote:
> 
>         Thanks! Let me take a look at the patch in the next couple weeks
>         (sorry, swamped with other things right now...)
> 
>         Nikolay, what is the right way to patch OpenSSL to support GOST2012?
>         Are there any instructions I can follow?
> 
>         Best,
> 
>         Aleksey
> 
>         On 10/3/14, 12:43 AM, Dmitry Belyavsky wrote:
>         > Hello Aleksey,
>         >
>         > Nikolay was in contact with me during the implementation of the patch.
>         > So the only significant problem I know is lack of support of GOST 2012
>         > in OpenSSL upstream.
>         >
>         >
>         > On Thu, Oct 2, 2014 at 11:07 PM, Aleksey Sanin <aleksey at aleksey.com <mailto:aleksey at aleksey.com>
>         > <mailto:aleksey at aleksey.com <mailto:aleksey at aleksey.com>>> wrote:
>         >
>         >     Thanks, Nikolay! I will review the patch shortly and I would love
>         >     to hear what Dmitry thinks about it.
>         >
>         >     Best,
>         >     Aleksey
>         >
>         >     On 10/2/14, 12:04 AM, Nikolay Shaplov wrote:
>         >     > Hi!
>         >     >
>         >     > Here is a patch that adds GOST2012 openssl support to xmlsec.
>         >     >
>         >     > GOST2012 is not accepted in openssl right now, but there is several
>         >     > proposed implementation.
>         >     >
>         >     > You might need to change md_gost12_256 and md_gost12_512 to what
>         >     > identifiers they used in certain openssl GOST2012 patch.
>         >     >
>         >     >
>         >     >
>         >     > _______________________________________________ xmlsec mailing
>         >     > list xmlsec at aleksey.com <mailto:xmlsec at aleksey.com>
>         <mailto:xmlsec at aleksey.com <mailto:xmlsec at aleksey.com>>
>         >     > http://www.aleksey.com/mailman/listinfo/xmlsec
>         >     >
>         >     _______________________________________________
>         >     xmlsec mailing list
>         >     xmlsec at aleksey.com <mailto:xmlsec at aleksey.com>
>         <mailto:xmlsec at aleksey.com <mailto:xmlsec at aleksey.com>>
>         >     http://www.aleksey.com/mailman/listinfo/xmlsec
>         >
>         >
>         >
>         >
>         > --
>         > SY, Dmitry Belyavsky
> 
> 
> 
> 
>     -- 
>     SY, Dmitry Belyavsky
> 
> 
> 
> 
> -- 
> SY, Dmitry Belyavsky
> 
> 
> _______________________________________________
> xmlsec mailing list
> xmlsec at aleksey.com
> http://www.aleksey.com/mailman/listinfo/xmlsec
> 


More information about the xmlsec mailing list