On Mon, Apr 06, 2020 at 07:16:23PM -0700, Jason Proctor wrote: > However, the d2i_NETSCAPE_SPKI() function errors out trying to deal > with them. That's not the droid you're looking for. > Question -- is there a supported way of importing SPKI encoded public > keys into the OpenSSL world? Yes. That'd be d2i_PUBKEY(3): https://www.openssl.org/docs/man1.1.1/man3/d2i_PUBKEY.html For example: https://github.com/openssl/openssl/blob/master/ssl/ssl_lib.c#L398-L404 -- Viktor.