[Bug 3013] Use the PKCS#8 formatted PEM files instead of insecure "traditional PEM"

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Fri Jul 5 15:21:53 AEST 2019


https://bugzilla.mindrot.org/show_bug.cgi?id=3013

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |djm at mindrot.org

--- Comment #1 from Damien Miller <djm at mindrot.org> ---
Created attachment 3295
  --> https://bugzilla.mindrot.org/attachment.cgi?id=3295&action=edit
support pkcs#8 and PEM

I don't think we want to remove the ability to support olde PEM keys
entirely as there's a bit of non-OpenSSL stuff that expects them. This
adds support for PKCS#8 in parallel.

"ssh-keygen -m PKCS8 -t rsa" seems to do the right thing with this now.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.


More information about the openssh-bugs mailing list