search for: do_convert_from_pem

...*pw) { Key *k; @@ -360,6 +382,9 @@ do_convert_to(struct passwd *pw) case FMT_PEM: do_convert_to_pem(k); break; + case FMT_SUBJECTINFO: + do_convert_to_subjectinfo(k); + break; default: fatal("%s: unknown key format %d", __func__, convert_format); } @@ -631,6 +656,38 @@ do_convert_from_pem(Key **k, int *private) } static void +do_convert_from_subjectinfo(Key **k, int *private) +{ + FILE *fp; + RSA *rsa; +#ifdef notyet + DSA *dsa; +#endif + + if ((fp = fopen(identity_file, "r")) == NULL) + fatal("%s: %s: %s", __progname, identity_file, strerror(errno)); + if (...

Hi list, I have no idea if Damien Miller had the time to work on that. I have an initial patch to authenticate using PKCS#11 and ECDSA keys. This requires OpenSSL 1.0.2, prior OpenSSL versions do not expose the required interfaces to override the signature function pointer for ECDSA. The only limitation is that the OpenSSL API misses some cleanup function (finish, for instance), hence I have yet