ssh-keygen :: PEM_write_RSA_PUBKEY failed

d icantplayguitar at gmail.com
Mon Nov 11 15:23:46 EST 2013


I am trying to understand a change to ssh-keygen that is included with OS X
Mavericks, 6.2p2 that prevents the option, -m PKCS8, from working.
 Previous to Mavericks I had 5.9p1 and didn't have this problem.

This used to work previously-
ssh-keygen -e -m PKCS8 -f $my_rsa_public_key

Now it outputs-
-----BEGIN PUBLIC KEY-----
-----END PUBLIC KEY-----
PEM_write_RSA_PUBKEY failed

I think this is the change, line 296 of ssh-keygen.c, that was added
in 6.1p1 that is the problem but I am not positive-
1.232        (djm      22-Apr-12): case KEY_RSA1:

If I am reading the commit correctly (possibly not), it seems to state the
opposite of what is intended-

revision 1.232
date: 2012/04/22 01:07:31;  author: djm;  state: Exp;  lines: +7 -5;
   - djm at cvs.openbsd.org 2012/02/29 11:21:26
     [ssh-keygen.c]
     allow conversion of RSA1 keys to public PEM and PKCS8; "nice" markus@

Is this a regression or am I not on the right path?

Thank you,
-d


More information about the openssh-unix-dev mailing list