There does not seem to be anything for OpenSSL to do here; it's about DNS libraries calling openssl to generate and/or verify signatures? -- Ticket here: http://rt.openssl.org/Ticket/Display.html?id=3236 Please log in as guest with password guest if prompted