Hi, 

 

 I manually ran "openssl genrsa -out key.rsa 2048" in FIPS on and off
mode, the generated private keys are in different format. 

 

In FIPS off mode:

-----BEGIN RSA PRIVATE KEY-----

MIIEpAIBAAKCAQEAwhVeHVTVFcrWJn6d8WJWgQ49lETK7a7rPS8nCxgOHJWmT3bV


in FIPS on mode, the rsa key is in the format of:

-----BEGIN PRIVATE KEY-----

MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDGFFwpoMPMm96I

 

The version we are using is OpenSSL 0.9.8l-fips. 

 

The key generated in FIPS on mode is pkcs#8. Is this the expected
behavior? Is there a way to specify the format of the RSA key? 

 

Thanks, -Yolanda

Reply via email to