Hi,

I'm trying to get interoperability between OpenSSL and IAIK using PKCS8
encoded DSA certs and keys created with the Java toolkit.

I understand that the OID used for OpenSSL DSA signed certificates is
different then that used for Java IAIK certificates. This is the source
of my problem when it comes to decrypting PKCS8 encoded DSA certificates 
and keys with one implementation while the certificates and keys were
created with the other.

However I had a minor breaktrough when I discovered that you could
tell the IAIK toolkit to expect a different OID for DSA. For example:

    new AlgorithmID("1.2.840.10040.4.1", "DSA", "DSA");

This enabled interop with OpenSSL and IAIK when the certs where created 
using the OpenSSL toolkit. However, I still cannot get interop when I
create the certs with IAIK.

What I'm wondering is, is it possible to do the same sort of thing in
OpenSSL? Can I tell the toolkit to expect another OID for DSA certs?
Namely the OID that is used by IAIK?

Take care,
Cory

-- 
Cory Winter                          E-Mail: mailto:[EMAIL PROTECTED]
Software Developer                   WWW: http://www.ooc.com/
Object Oriented Concepts, Inc.       Phone: (709) 738-3725 
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to