86787 - SECKEY_ConvertAndDecodePublicKey(): Failed to load public key DER file produced by openssl

Status: RESOLVED INVALID

(NSS :: Libraries, defect)

Description

[Aleksey Sanin]

Steps to reproduce:
1) create public key ring DER file using by openssl v 0.9.1 using 
   following commands inside openssl:
          OpenSSL>genrsa -out private.pem
          OpenSSL>rsa -in private.pem -outform DER -pubout -out public.der
2) base64 encode this file (for example, using 'btoa' tool from 
   NSS/bin folder)
3) try to load the result file using SECKEY_ConvertAndDecodePublicKey()
   function

As the result, this function will return NULL. Further investigation shows
that SECKEY_DecodeDERPublicKey function failed to decode DER file on the second 
tag inside this file because of wrong tag number.

Probably, this bug is similar to bug# 80416 but I am not an expert and
I would like to have confirmation from NSS guys.

Comment 1

[Aleksey Sanin]

DER format from OpenSSL really is 'PKCS #1 RSA Encryption', plain der key is 
inside this envelope.