On Mon, Mar 01, 2010, Jan C. wrote:

> Hello,
> I have an engine which implements the rsa_generate_key method. When I
> want to generate a private key with the genrsa command, the key is
> generated in software mode:
> 
> > openssl genrsa   -engine myengine   -out /tmp/priv.pem 1024
> 
> I see that in the rsa_gen.c file the rsa structure,  does not point to
> my rsa_keygen function hence the built in function is used:
> 
> > if(rsa->meth->rsa_keygen) // this is null
> >             return rsa->meth->rsa_keygen(rsa, bits, e_value, cb);
> > return rsa_builtin_keygen(rsa, bits, e_value, cb);
> 
> 
> 
> When I generate a certificate with the "req" command, the private key
> is generated correctly in the engine.
> 
> What am I doing wrong ?
> 


There's a bug in genrsa, please try the latest CVS or apply this patch:

http://cvs.openssl.org/chngview?cn=19359

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to