Michael Richardson

load provider keys from handle

2

This code uses the openssl 3.x OSSL_STORE_* APIs to load key objects. The older d2i_* and PEM_read_* do not interact at all with providers. This does not solve generating keys...

This adds CMS support to the Ruby layer.

7

This updates the patch to support openssl 3.x. I have maintained a patch for some years for openssl1.1.1 that adds CMS support. (This is needed for RFC8995 code)

It is implied that OpenSSL::PKey::EC.new can take a public key/EC::Point to form a key, but I could not make it work. Since 3.x wants keys immutable, they have to be...

feat: added read_derpub, to only attempt to load DER encoded public keys

1

This new routine reads a public in DER format only. Other routines get confused by too many heuristics and do not support doing this.

This adds a few more clues to the documentation, as the straight reference to the genpkey didn't help me update from openssl 1. to openssl 3.

duplicate I-D status report URL is not absolute

1

### Describe the issue ```` %make publish .... versioned/draft-ietf-acme-rats-00: kramdown-rfc ... OK rm versioned/draft-ietf-acme-rats-00.md {"id": "158118", "name": "draft-ietf-acme-rats", "rev": "00", "status_url": "https://datatracker.ietf.org/api/submission/158118/status"} ```` successful URL (but, waiting for WG Chair...