> if (type == SSL_FILETYPE_PEM) {
> ...
> } else {
> SSLerr(SSL_F_SSL_CTX_USE_PRIVATEKEY_FILE,SSL_R_BAD_SSL_FILETYPE);
> goto end;
> }
>

This is interesting, perhaps you are using an old version of OpenSSL? From
the OpenSSL man page:

SSL_CTX_use_PrivateKey_file() adds the first private key found in file to
ctx. The formatting type of the certificate must be specified from the known
types SSL_FILETYPE_PEM, SSL_FILETYPE_ASN1. SSL_CTX_use_RSAPrivateKey_file()
adds the first private RSA key found in file to ctx.
SSL_use_PrivateKey_file() adds the first private key found in file to ssl;
SSL_use_RSAPrivateKey_file() adds the first private RSA key found to ssl.

That certainly makes it sound like it supports ASN1.

Dominick Meglio
Received on 2004-04-16