Re: Provider: cannot sign with ed25519-like key

Hey Matt,

thanks, that seems to be it! I've set up a params list in keymanagement 
with:

  static const OSSL_PARAM keymgmt_params[] = {
     OSSL_PARAM_int(OSSL_PKEY_PARAM_MAX_SIZE, &_ed25519_keysize),
     OSSL_PARAM_END
};

static const OSSL_PARAM* keymgmt_gettable_params(ossl_unused void *provctx)
{
     return keymgmt_params;
}

but still the OSSL_FUNC_KEYMGMT_GET_PARAMS only returns two prefilled 
params:

* default-digest
* mandatory-digest

but has not the "max-size" param. Why would that be?

All the best,
Bernd

Am 08.08.24 um 10:44 schrieb Matt Caswell:
> 
> 
> On Thu, Aug 8, 2024 at 7:34 AM 'Bernd Ritter' via openssl-users 
> <[email protected] <mailto:[email protected]>> wrote:
> 
>       > error:030000A7:digital envelope routines::unknown max size
> 
> 
> That error comes from here:
> 
> https://github.com/openssl/openssl/blob/fd39d1c80cd5bd9cb5c64e3fc96102397e5e860f/crypto/evp/p_lib.c#L1811-L1827 <https://github.com/openssl/openssl/blob/fd39d1c80cd5bd9cb5c64e3fc96102397e5e860f/crypto/evp/p_lib.c#L1811-L1827>
> 
> So something is attempting to determine the size of a pkey and found it 
> to be invalid.
> 
> This value should be returned by the keymgmt get_params function for the 
> parameter OSSL_PKEY_PARAM_MAX_SIZE
> 
> See:
> https://docs.openssl.org/master/man7/provider-keymgmt/#common-information-parameters <https://docs.openssl.org/master/man7/provider-keymgmt/#common-information-parameters>
> 
> and
> 
> https://docs.openssl.org/master/man3/EVP_PKEY_get_size/#description 
> <https://docs.openssl.org/master/man3/EVP_PKEY_get_size/#description>
> 
> Matt
> 

-- 
Bernd Ritter
Senior Linux Developer
Tel.: +49 175 534 4534
Mail: ritter-shG/GajIFYqbacvFa/[email protected]

B1 Systems GmbH
Osterfeldstraße 7 / 85088 Vohburg / http://www.b1-systems.de
GF: Ralph Dehner / Unternehmenssitz: Vohburg / AG: Ingolstadt, HRB 3537

-- 
You received this message because you are subscribed to the Google Groups "openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org
To view this discussion on the web visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/75136198-4d9e-4262-b22a-cc98b3a4e334%40b1-systems.de.