You are indeed correct. Will fix it. This works because OpenSSL does 2 
formats with one function :-/


On 26 May 2014 19:41:52 Paul Kehrer <notifications@github.com> wrote:

> > @@ -0,0 +1,21 @@
> > +-----BEGIN DSA PARAMETERS-----
> > +MIIBHwKBgQCqCTDMFFglIhyv+iisKJQZaieDPeXsIScHkWiUIHd0oueyOLDTbxsk
> > +maLCWFCD6wFDKSRBjYZ/qiEt0QcdTc6yeCeUrTk8wIpNStp/aNboOaX800tOQC2C
> > +y4qMtA/sMZEb+b02CwNMqstMXpR5klc8npAJnBsPBZQMq+XS3kmhZwIVAK3A6Gmz
> > +bwrAE6aB/fTUiZ1pggRRAoGBAIxrRYmvpTpNEEi/w0bR84bKdVIcz3LdqiUShogO
> > +4TIB/0iJC7/DPXm6yuxx56d4UHvV8aZkIuOUFb4D5xFBujJPW5MTGSkYLIip+kBi
> > +g2Bmzr50tcZpDH0QEQbCQKt+vVTk4zAf0IbOatrJIvsnE6KwiHy6E7m8aM5c//JB
> > +zTJG
> > +-----END DSA PARAMETERS-----
> > +-----BEGIN DSA PRIVATE KEY-----
>
> Is this actually in PKCS8 format? The PEM header implies it's not. I did 
> see this in the OpenSSL docs regarding DSA PKCS8:
>
>     The format of PKCS#8 DSA (and other) private keys is not well documented: 
>     it is hidden away in PKCS#11 v2.01,
>     section 11.9. OpenSSL's default DSA PKCS#8 private key format complies with 
>     this standard.
>
> I also see options for 
> [generating](https://www.openssl.org/docs/apps/pkcs8.html) all sorts of 
> weird "broken" encodings.
>
> ---
> Reply to this email directly or view it on GitHub:
> https://github.com/pyca/cryptography/pull/877/files#r13054635