Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Command export-p1 use of traditional format should be conditional #1054

Closed
TinCanTech opened this issue Jan 2, 2024 · 0 comments
Closed
Assignees
Milestone

Comments

@TinCanTech
Copy link
Collaborator

TinCanTech commented Jan 2, 2024

Command export-p1 forces use of SSL option -traditional, which is as follows:

When writing a private key, use the traditional PKCS#1 format instead of the PKCS#8 format.
https://www.openssl.org/docs/man3.0/man1/openssl-rsa.html

Easy-RSA should conform to expected output of PKCS#8 but allow use of -traditional as a command option for PKCS#1.

On the other hand, if PKCS#1 is the desired target format then use export-p1, otherwise use export-p8. This appears to have fixed itself ..

Follow up question: Is PKCS#1 still a viable format for Easy-RSA to support ?

@TinCanTech TinCanTech added this to the v3.2.0 milestone Jan 2, 2024
@TinCanTech TinCanTech self-assigned this Jan 2, 2024
@TinCanTech TinCanTech linked a pull request Jan 6, 2024 that will close this issue
@TinCanTech TinCanTech removed a link to a pull request Jan 6, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant