[dnsext] Is rfc3110 correct?

[Mark Andrews <marka@isc.org>]

	This looks like is should be PKCS1 type 1 padding but that
	starts with 00.

% grep signature rfc2537.txt rfc3110.txt | grep FF
rfc2537.txt:     signature = ( 00 | 01 | FF* | 00 | prefix | hash ) ** e (mod n)
rfc3110.txt:         signature = ( 01 | FF* | 00 | prefix | hash ) ** e (mod n)
% 

	draft-ietf-dnsext-dnssec-rsasha256-14 looks ok.

% grep signature draft-ietf-dnsext-dnssec-rsasha256-14.txt | grep FF
   signature = ( 00 | 01 | FF* | 00 | prefix | hash ) ** e (mod n)
% 

	I noticed this as rsasha256 and rsasha512 is not supported
	by OpenSSL 0.9.7 and to one had to use something more
	primative than RSA_sign().

	Matk
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE:	+61 2 9871 4742		         INTERNET: mark@isc.org