pfSense

Rather than patching OpenSSL, we could use a pure PHP implementation of RSA to generate the voucher keys:

http://phpseclib.sourceforge.net/

include_once('Crypt/RSA.php');
$rsa = new Crypt_RSA();
$key = $rsa->createKey(64);
$private_key = $key["privatekey"];
$public_key = $key["publickey"];

Similar to what we did for x509 CRLs for PHP 7.x.

The code above works with the files from that library copied to the host and with the directory it's in added to the PHP include path. The contents of the generated public and private keys are in the correct format.

We'd need to make a port for it, but that still seems like a better idea than patching OpenSSL.

Once the port is in place we can update the code to use it.

Applied in changeset ad1d975acce7a0b7562baca0a6cadab2629de51e.