On Tue, Jan 19, 2021 at 06:26:23PM -0500, Russ Housley wrote:
> I am looking a test certificate that contains an RSA-OAEP subject
> public key (OID = id-RSAES-OAEP from RFC 4055) and is signed with
> RSA-PSS (OID = id-RSASSA-PSS also from RFC 4055). I have not ben able
> to find a way to generate such a certificate with OpenSSL. If you
> have a pointer to such a certificate or a recipe for generating one, I
> would appreciate the pointer.
While RSA-PSS keys are supported by genpkey(1), I don't see any support
for generating RSAES-OAEP keys in any of the command-line utilities.
It does not look like RSAES-OAEP SPKI are supported even at the API
level. Perhaps I did not look hard enough...
--
Viktor.
