oqs-provider icon indicating copy to clipboard operation
oqs-provider copied to clipboard

Server not recognizing public key algorithm.

Open anhu opened this issue 8 months ago • 7 comments

I'm at commit afc1de27034a49c48ff656f36c021b9e046daeb0 (HEAD -> main, origin/main, origin/HEAD) I did fullbuild.sh.

I generated a certificate chain. Some relevant command and snipped output:

$ openssl x509  -provider-path /path/to/oqs-provider/_build/lib -provider oqsprovider -in mldsa44_entity_cert.pem -noout -text
...
        Subject Public Key Info:
            Public Key Algorithm: mldsa44
                mldsa44 public key:
                PQ key material:
                    7e:87:7f:a7:ae:3b:26:05:29:5b:28:6a:db:52:d8:
...

So we know this is an mldsa44 public key in the certificate. I then run the following command and get the error as shown below:

$ openssl s_server  -provider-path /path/to/oqs-provider/_build/lib -provider oqsprovider -port 11111 -cert mldsa44_entity_cert.pem -key mldsa44_entity_key.pem
Using default temp DH parameters
error setting certificate
801B7753797A0000:error:0A0000F7:SSL routines:ssl_set_cert:unknown certificate type:../ssl/ssl_rsa.c:239:

Version of openSSL might be relevant:

$ openssl version
OpenSSL 3.0.2 15 Mar 2022 (Library: OpenSSL 3.0.2 15 Mar 2022)

Am I missing something on the s_server command line?

Warm regards, Anthony

anhu avatar Feb 12 '25 18:02 anhu