Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/openssl/openssl.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
path: root/doc
diff options
context:
space:
mode:
authorRichard Levitte <levitte@openssl.org>2002-07-18 23:10:57 +0400
committerRichard Levitte <levitte@openssl.org>2002-07-18 23:10:57 +0400
commitdb802c60e32820866bcfadef47e627821aac7442 (patch)
treead6deb29b90785a5a16016e2b92e580bdbdf0c22 /doc
parent503f3b1a21903773ba5ae7452a44f379c20e5739 (diff)
Explain why RSA_check_key() doesn't work with hard keys.
PR: 86
Diffstat (limited to 'doc')
-rw-r--r--doc/crypto/RSA_check_key.pod11
1 files changed, 10 insertions, 1 deletions
diff --git a/doc/crypto/RSA_check_key.pod b/doc/crypto/RSA_check_key.pod
index 79fed753ad..5737ecdc3e 100644
--- a/doc/crypto/RSA_check_key.pod
+++ b/doc/crypto/RSA_check_key.pod
@@ -28,12 +28,21 @@ RSA_check_key() returns 1 if B<rsa> is a valid RSA key, and 0 otherwise.
If the key is invalid or an error occurred, the reason code can be
obtained using L<ERR_get_error(3)|ERR_get_error(3)>.
+=head1 NOTES
+
+RSA_check_key() can only check soft keys. If given hard keys, i.e. keys
+that were retreived from an ENGINE (with ENGINE_load_private_key()),
+RSA_check_key() will always return 0, as if the key was invalid. The
+reason is that the private components B<p>, B<q> and B<d> are normally
+not available to OpenSSL for hard keys, and the checks can therefore not
+be done.
+
=head1 SEE ALSO
L<rsa(3)|rsa(3)>, L<err(3)|err(3)>
=head1 HISTORY
-RSA_check() appeared in OpenSSL 0.9.4.
+RSA_check_key() appeared in OpenSSL 0.9.4.
=cut