[openssl.org #2495] enable PEM_write_DSAPublicKey

[Rich Salz via RT]

Like drH says, use the DSA_PUBKEY versions.
--
Rich Salz, OpenSSL dev team; rs...@openssl.org

__
OpenSSL Project http://www.openssl.org
Development Mailing List   openssl-dev@openssl.org
Automated List Manager   majord...@openssl.org

[openssl.org #2495] enable PEM_write_DSAPublicKey

[(Damien Miller) via RT]

Hi,

Is there any reason why PEM_write_DSAPublicKey() is not enabled in pem_all.c?
We'd like to use this in OpenSSH.

Index: crypto/pem/pem.h
===
RCS file: /cvs/src/lib/libssl/src/crypto/pem/pem.h,v
retrieving revision 1.10
diff -u -p -r1.10 pem.h
--- crypto/pem/pem.h1 Oct 2010 22:58:56 -   1.10
+++ crypto/pem/pem.h8 Apr 2011 20:55:11 -
@@ -488,6 +488,7 @@ DECLARE_PEM_rw(RSA_PUBKEY, RSA)
 
 DECLARE_PEM_rw_cb(DSAPrivateKey, DSA)
 
+DECLARE_PEM_rw_const(DSAPublicKey, DSA)
 DECLARE_PEM_rw(DSA_PUBKEY, DSA)
 
 DECLARE_PEM_rw_const(DSAparams, DSA)
Index: crypto/pem/pem_all.c
===
RCS file: /cvs/src/lib/libssl/src/crypto/pem/pem_all.c,v
retrieving revision 1.8
diff -u -p -r1.8 pem_all.c
--- crypto/pem/pem_all.c1 Oct 2010 22:58:56 -   1.8
+++ crypto/pem/pem_all.c8 Apr 2011 20:55:11 -
@@ -224,6 +224,7 @@ DSA *PEM_read_bio_DSAPrivateKey(BIO *bp,
 }
 
 IMPLEMENT_PEM_write_cb_const(DSAPrivateKey, DSA, PEM_STRING_DSA, DSAPrivateKey)
+IMPLEMENT_PEM_rw_const(DSAPublicKey, DSA, PEM_STRING_DSA_PUBLIC, DSAPublicKey)
 IMPLEMENT_PEM_rw(DSA_PUBKEY, DSA, PEM_STRING_PUBLIC, DSA_PUBKEY)
 
 #ifndef OPENSSL_NO_FP_API

__
OpenSSL Project http://www.openssl.org
Development Mailing List   openssl-dev@openssl.org
Automated List Manager   majord...@openssl.org

[openssl.org #2495] enable PEM_write_DSAPublicKey

[Stephen Henson via RT]

Well it's a non-standard format AFAIK. You can use the DSA_PUBKEY
routines instead which is more standard: it uses the same format as DSA
keys in certificates.

The equivalent RSAPublicKey routines do exist but that format is
standardised in PKCS#1.

Steve.
-- 
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org

__
OpenSSL Project http://www.openssl.org
Development Mailing List   openssl-dev@openssl.org
Automated List Manager   majord...@openssl.org