On Thu, 8 May 2014 09:23:26 -0700 (PDT)
MichaelM <michael.mut...@nexusgroup.com> wrote:

> We want to read the public key of certificates created with an RSA
> PSS key. 

openssl doesn't support that afaik.

There's actually a thing to understand here: You can use RSA-PSS both
with "normal" old RSA keys and dedicated RSA-PSS-keys+certificates. The
latter are rarely supported at all by any software. RSA-PSS-signatures
with "normal" RSA keys are supported by openssl.

I investigated this for my diploma thesis a few years ago and I only
found one obscure java library that was able to actually create and use
such dedicate pss keys.

I'm interested: Who has created these certificates and what software
was used there?

-- 
Hanno Böck
http://hboeck.de/

mail/jabber: ha...@hboeck.de
GPG: BBB51E42

Attachment: signature.asc
Description: PGP signature

Reply via email to