{"action":"closed","issue":{"url":"https://api.github.com/repos/Yubico/yubikey-piv-manager/issues/1","labels_url":"https://api.github.com/repos/Yubico/yubikey-piv-manager/issues/1/labels{/name}","comments_url":"https://api.github.com/repos/Yubico/yubikey-piv-manager/issues/1/comments","events_url":"https://api.github.com/repos/Yubico/yubikey-piv-manager/issues/1/events","html_url":"https://github.com/Yubico/yubikey-piv-manager/issues/1","id":95950770,"number":1,"title":"EC P256 Certificate Signing Requests are Broken","user":{"login":"darconeous","id":686678,"avatar_url":"https://avatars.githubusercontent.com/u/686678?v=3","gravatar_id":"","url":"https://api.github.com/users/darconeous","html_url":"https://github.com/darconeous","followers_url":"https://api.github.com/users/darconeous/followers","following_url":"https://api.github.com/users/darconeous/following{/other_user}","gists_url":"https://api.github.com/users/darconeous/gists{/gist_id}","starred_url":"https://api.github.com/users/darconeous/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/darconeous/subscriptions","organizations_url":"https://api.github.com/users/darconeous/orgs","repos_url":"https://api.github.com/users/darconeous/repos","events_url":"https://api.github.com/users/darconeous/events{/privacy}","received_events_url":"https://api.github.com/users/darconeous/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-07-19T21:33:25Z","updated_at":"2015-08-03T09:10:49Z","closed_at":"2015-08-03T09:10:49Z","body":"Whenever I have the tool generate a CSR using ECC P256, the generated CSR is invalid. The issue appears to be with the ECDSA signature on the certificate request, which appears to be stored incorrectly:\r\n\r\n    Certificate Request:\r\n        Data:\r\n            Version: 0 (0x0)\r\n            Subject: DC=net, DC=voria, DC=token, CN=Yubikey NEO 35XXXXX\r\n            Subject Public Key Info:\r\n                Public Key Algorithm: id-ecPublicKey\r\n                EC Public Key: \r\n                    pub: \r\n                        04:dd:91:86:6a:92:69:90:d9:cd:f0:81:ca:a3:40:\r\n                        80:d8:64:e3:ad:13:3a:ed:43:0e:42:a0:95:b2:1e:\r\n                        8c:2c:46:60:f3:5b:75:33:92:38:51:52:b8:6c:0c:\r\n                        1a:b8:b0:6f:ee:f1:33:7a:9a:37:a8:79:d7:c8:de:\r\n                        19:92:43:23:83\r\n                    ASN1 OID: prime256v1\r\n            Attributes:\r\n                a0:00\r\n        Signature Algorithm: ecdsa-with-SHA256\r\n            30:46:02:21:00:c3:7d:49:a6:da:e9:fe:25:18:26:7d:20:3e:\r\n            6a:80:22:04:a4:9d:a8:fb:72:9a:7c:99:c5:48:02:e2:28:0b:\r\n            65:02:21:00:d6:58:07:d0:f5:a5:f9:d9:f1:53:49:5d:3b:8a:\r\n            5c:75:87:66:43:32:da:ce:97:67:33:0d:9b:8e:78:54:3a:17\r\n    Check that the request matches the signature\r\n    Signature verification problems....\r\n    20298:error:0D0C50A1:asn1 encoding routines:ASN1_item_verify:unknown message digest algorithm:/SourceCache/OpenSSL098/OpenSSL098-52.30.1/src/crypto/asn1/a_verify.c:164:\r\n"}}