Would the current set of DSA key blacklists detect a DSA key that was generated with openssl on an affected/vulnerable system, BUT whose DSA parameters (
dsaparam) were generated on an unaffected system?
On an unaffected system:
$ openssl dsaparam -out dsap.pem 1024
dsap.pem to an affected system.
On an affected system:
$ openssl gendsa -out dsakeys.pem dsap.pem