Re: OpenSSL 1.0.0 Stable snaps

On 2009.06.24 at 10:28:35 -0500, hdf sdesdh wrote:

> I recently tried to compile openssl 1.0.0-beta2 with apache to enable
> support for ECC crypto.  It compiled fine, though I ran into errors

It is not so simple. Apache uses some very percular data structures
to handle keys and certificates inside mod_ssl, and these structures
support only DSA and RSA.

Some time ago I've developed patch for Apache 2.2.x, to allow use of
GOST algorithms. As a side effect it should also enable all other
algorithms, supported by OpenSSL 0.9.9/1.0.0

Patch is available at
http://www.cryptocom.ru/OpenSource/apache-2.2.6-openssl-1.0.0.diff.gz

and should work with recent patchlevels of apache (above 2.2.6) as well.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@...
Automated List Manager                           majordomo@...