Re: [openssl-users] Need help encrypting my ca.key

2015-01-06 Thread jack seth
3:39:04 + > From: openssl-us...@dukhovni.org > To: openssl-users@openssl.org > Subject: Re: [openssl-users] Need help encrypting my ca.key > > On Tue, Jan 06, 2015 at 05:25:21PM -0600, jack seth wrote: > > > Well I ran the command > > openssl asn1parse -in ca.key &g

Re: [openssl-users] Need help encrypting my ca.key

2015-01-06 Thread Viktor Dukhovni
On Tue, Jan 06, 2015 at 05:25:21PM -0600, jack seth wrote: > Well I ran the command > openssl asn1parse -in ca.key > > I got a bunch of numbers, a hex dump, and something that says 'rsaEncryption' In that case, this is a PKCS#8 file encoded in PEM. The first line was probably: -BE

Re: [openssl-users] Need help encrypting my ca.key

2015-01-06 Thread jack seth
n readable. It does have MII at the start but it also has Begin Private Key at the beginning. Any more steps to follow to find out what type of key this is? > Date: Tue, 6 Jan 2015 00:23:35 -0500 > From: noloa...@gmail.com > To: openssl-users@openssl.org > Subject: Re

Re: [openssl-users] Need help encrypting my ca.key

2015-01-05 Thread Jeffrey Walton
On Tue, Jan 6, 2015 at 12:37 AM, Viktor Dukhovni wrote: > On Tue, Jan 06, 2015 at 12:23:35AM -0500, Jeffrey Walton wrote: > >> Use -outform to control the output encoding. I think the two values of >> interest are DER and PEM. > > What actually matters are multiple ASN.1 key formats. Whether the

Re: [openssl-users] Need help encrypting my ca.key

2015-01-05 Thread Viktor Dukhovni
On Tue, Jan 06, 2015 at 12:23:35AM -0500, Jeffrey Walton wrote: > Use -outform to control the output encoding. I think the two values of > interest are DER and PEM. What actually matters are multiple ASN.1 key formats. Whether the ASN.1 is raw binary or packaged in PEM is secondary. $ opens

Re: [openssl-users] Need help encrypting my ca.key

2015-01-05 Thread Jeffrey Walton
On Tue, Jan 6, 2015 at 12:04 AM, jack seth wrote: > Thanks for the response. First I am running this on Windows 7. Questions > > 1. How can I determine what key format my ca.key is in? If its binary, then its simply ASN.1/DER encoded. If its ASCII (human readable) and starts with MII (IIRC), t

Re: [openssl-users] Need help encrypting my ca.key

2015-01-05 Thread Viktor Dukhovni
On Mon, Jan 05, 2015 at 11:04:19PM -0600, jack seth wrote: > Thanks for the response. First I am running this on Windows 7. Questions > > 1. How can I determine what key format my ca.key is in? openssl asn1parse -in ca.key (don't post the output). plus some knowledge of the various A

Re: [openssl-users] Need help encrypting my ca.key

2015-01-05 Thread jack seth
this? > Date: Tue, 6 Jan 2015 02:48:13 + > From: openssl-us...@dukhovni.org > To: openssl-users@openssl.org > Subject: Re: [openssl-users] Need help encrypting my ca.key > > On Mon, Jan 05, 2015 at 08:37:24PM -0600, jack seth wrote: > > I must be doing something wron

Re: [openssl-users] Need help encrypting my ca.key

2015-01-05 Thread Viktor Dukhovni
On Mon, Jan 05, 2015 at 08:37:24PM -0600, jack seth wrote: > I must be doing something wrong but I can't figure out what it is. I am > trying to encrypt my private ca key with this command > > openssl rsa -in ca.key -out caencrypted.key -aes256 > > This works fine but the problem is I don't g

[openssl-users] Need help encrypting my ca.key

2015-01-05 Thread jack seth
I must be doing something wrong but I can't figure out what it is. I am trying to encrypt my private ca key with this command openssl rsa -in ca.key -out caencrypted.key -aes256 This works fine but the problem is I don't get the original key back when I decrypt it using this command openss