I am currently working on writing an openssl engine to interface with a piece of hardware. I am trying to understand how to implement rsa key generation, where the private key bytes would not be available. I am currently invoking the command: openssl genrsa -engine foo Which is calling my callback for RSA keygen, registered via ENGINE_set_RSA() and I set the flags: RSA_FLAG_EXT_PKEY. However, genrsa app seems to want rsa->e set here: https://github.com/openssl/openssl/blob/OpenSSL_1_0_2g/apps/genrsa.c#L291 I can't find documentation on how to handle the keygen interface for RSA. Can someone point me in the right direction? Thanks, Bill -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users