RSA-OAEP Certificate

[Viktor Dukhovni]

On Tue, Jan 19, 2021 at 06:26:23PM -0500, Russ Housley wrote:

> I am looking a test certificate that contains an RSA-OAEP subject
> public key (OID = id-RSAES-OAEP from RFC 4055) and is signed with
> RSA-PSS (OID = id-RSASSA-PSS also from RFC 4055).  I have not ben able
> to find a way to generate such a certificate with OpenSSL.  If you
> have a pointer to such a certificate or a recipe for generating one, I
> would appreciate the pointer.

While RSA-PSS keys are supported by genpkey(1), I don't see any support
for generating RSAES-OAEP keys in any of the command-line utilities.

It does not look like RSAES-OAEP SPKI are supported even at the API
level.  Perhaps I did not look hard enough...

-- 
    Viktor.