Letting openssl tools understand openssh keys?

Hey there all,

I have a simple question.  Would it be possible to have the openssl 
asn1parse tools and the like be able to show the details in openssh private 
key formats?  There are data blocks in the private key (including an 
unencrypted copy of the public key -- which I believe s sent during ssh 
session setup), and unless you know this and can print it out, it's 
non-obvious.

This might also be useful in an audit scenario, where you wanted to look to 
ensure that users had no keys with no password set.

The only write-up I've found is 
here: https://coolaj86.com/articles/the-openssh-private-key-format/

It's ASN-1 encoded with base64, but the tools included with openssl don't 
properly decode them, and openssh themselves have no such tools to do so. 
 It makes sense that if there's one "can-opener" that can handle these, it 
should be forgiving of this weird format.

-Dan

(Apologies I am not using my normal email addresses, google groups seems to 
really want a gmail address, and I'm not letting google have one from my 
own domain)

-- 
You received this message because you are subscribed to the Google Groups "openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/b7ed1847-3950-4c5f-87b5-90922fbb3275n%40openssl.org.