Bill Rebey wrote: > > In an effort to read a DER key, I have discovered that support for this > feature appears to be missing from OpenSSL. > > Am I missing someting or misusing the API? I thought DER and PEM were both > supported. Any help woould be appreciated. > > >From ssl_rsa.c, here is SSL_CTX_use_PrivateKey_file (...), which apparently > only supports PEM files. >
Its not easy to work out what kind of key (encrypted, unencrypted, PKCS#8 etc) is in a DER file so this isn't currently handled. You can use the normal OpenSSL DER routines and get the key in an EVP_PKEY structure and pass that to the SSL library. Steve. -- Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/ Personal Email: [EMAIL PROTECTED] Senior crypto engineer, Celo Communications: http://www.celocom.com/ Core developer of the OpenSSL project: http://www.openssl.org/ Business Email: [EMAIL PROTECTED] PGP key: via homepage. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
