For now, I've added a note in the documentation of RSA_check_key() that explains that it doesn't work properly for hard keys and why. We will ponder a little more on this issue.
[[EMAIL PROTECTED] - Wed Jun 19 09:52:27 2002]: > It wouldn't take much to make this function > compatible, or the others that I haven't used and that > have the same problem, maybe create a new flag for the > RSA keys, I already use RSA_FLAG_EXT_PKEY, what about > something like RSA_FLAG_ENGINE_PKEY, I imagine that it > would force peoples to modify there code for their > engines, to add this flag when they load a key. Actually, there's no reason to add yet another flag, since RSA_FLAG_EXT_PKEY is designed to point out that the key is stored externally (the comment in rsa.h explicitely mentions "external hardware"). -- Richard Levitte [EMAIL PROTECTED] ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]