"unable to load public key" error on openssl1.1.1f

[keiji_niwa]

Hi all
I try to perform encryption using the public key obtained using eHSM-KMS getpublickey API.
However, in my environment, the encryption fails with "unable to　load Public key". my environment using openssl1.1.1f.

Encryption succeeds in other environments. This environment uses openssl3.0.2.

What causes encryption to fail with an "unable to load public key" error in openssl1.1.1f environment?

Regards,
keiji_niwa

[Iffa_Intel]

Hi,

could you clarify if there is a specific reason you are using OpenSSL 1.1.1?

Cordially,

Iffa

[keiji_niwa]

Hi,
eHSM-KMS supports OpenSSL1.1.1.

eHSM-KMS in our environment also uses OpenSSL1.1.1.

Therefore, we decided to use OpenSSL1.1.1 for encryption.

thank you.

[keiji_niwa]

hi all.
I was able to resolve the issue by changing the public key format to pkck#11.
thank you.

[keiji_niwa · Accepted solution]

This is a correction.
pkcs#11 is wrong
The correct name is pkcs#8.

[Sahira_Intel]

Hi,

I recommend opening a ticket in the official EHSM Github: https://github.com/intel/ehsm/issues

Sincerely,

Sahira