Using OpenSSH private key results in openssl_sign() - supplied key param cannot be coerced into a private key

[renepupil]

Newly generated Private OpenSSH key:

-----BEGIN OPENSSH PRIVATE KEY-----
b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAaAAAABNlY2RzYS
1zaGEyLW5pc3RwMjU2AAAACG5pc3RwMjU2AAAAQQRIM64i1/lMebw78VNC6dJyvqMPGMvJ
otq7dOWhTgd7jskE+QJ0wgvgd9O7l/OGgh9LfYWmhV+w7XYbzUIepe3aAAAAwMgJCbzICQ
m8AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBEgzriLX+Ux5vDvx
U0Lp0nK+ow8Yy8mi2rt05aFOB3uOyQT5AnTCC+B307uX84aCH0t9haaFX7DtdhvNQh6l7d
oAAAAgGzQQdtXwTXbDjWJJW1paj3Skh1s9p+VtAUs3uOm1ODUAAAAhYXp1cmVhZFxvbGl2
ZXJibGFwcEBMZW5vdm8tTEVHSU9OAQIDBAUGBw==
-----END OPENSSH PRIVATE KEY-----

Code to reproduce:

/** @var PrivateKey $pv */
$file_path = 'working/file/path';
$pv = PublicKeyLoader::load(file_get_contents("$file_path/id_ecdsa"), 'passphrase');
$pv->sign('idhahsdijsoihasdj');

It seems the conversion from OpenSSH to PKCS8 is broken ($this->toString('PKCS8', ['namedCurve' => false])), as the connection can be established when ignoring the php warning, also when calling useInternalEngine, as then the routine to use openssl_sign is not evoked.

Did I do something wrong?

I would either expect the connection to fail, or that an exception is thrown.

Again, workarount $key::useInternalEngine() works... (for the impatient reader)

[terrafrost]

The key doesn't appear to be encrypted. If you replace PublicKeyLoader::load(file_get_contents("$file_path/id_ecdsa"), 'passphrase') with PublicKeyLoader::load(file_get_contents("$file_path/id_ecdsa")) it seems to work just fine.

Obviously the error is unhelpful and obviously the internal engine and the OpenSSL engine ought to behave in the same way but the broader issue is that the key isn't encrypted.

[terrafrost]

6a6c222 should fix this

[renepupil]

Thank you for the reply!

With $this->withPassword()->toString('PKCS8', ['namedCurve' => false]) what will happen when the key is NOT encrypted?

Also, as far as I know having an encrypted key shouldn't be mandatory, right?

[terrafrost]

withPassword() is how you remove a password from an encrypted key. If the key isn't encrypted it doesn't do anything.