We need to think about how to handle this case in a backend neutral way. This is OpenSSL specific. Do we need to add a method to the DSABackend interface that can create DER encoded DSA sigs?