Re: CSR with only public key

2019-09-12 Thread Bharathi Prasad
You are right. Cannot create a certificate with CSR containing only public key. Thanks for the explanation. -- Sent from: http://openssl.6102.n7.nabble.com/OpenSSL-User-f3.html

Re: CSR with only public key

2019-09-12 Thread Walter H.
Hey, Try calculating the private Key from the public key ;-) but this can last a little time you don't have; Walter On Thu, September 12, 2019 09:50, Bharathi Prasad wrote: > Hi, > I have the public key of the client but not the private key. > ... > > Regards, > Bharathi

Re: CSR with only public key

2019-09-12 Thread Bharathi Prasad
Hi, Thanks for the prompt replies. I agree signature from private key should be present in a CSR. However, as per RFC 2511, Proof Of Possession is optional though it strongly recommends to have it. I was able to create the CSR with only public key. I was unintentionally adding an extra line at

Re: CSR with only public key

2019-09-12 Thread Viktor Dukhovni
On Thu, Sep 12, 2019 at 12:50:23AM -0700, Bharathi Prasad wrote: > I have the public key of the client but not the private key. I am required > to generate a CSR with only public key. I understand private key is required > for Proof of Possession. However, as per my requirement I am su

Re: CSR with only public key

2019-09-12 Thread Salz, Rich via openssl-users
>I used CX509CertificateRequestCertificate class to create CSR with only public key. Those functions/classes/names/whatever are not part of OpenSSL. The OpenSSL "req" command cannot process as CSR unless it is signed by the private key. If you have a requirement

Re: CSR with only public key

2019-09-12 Thread Kyle Hamilton
it's not a complete request, and doesn't match the expected ASN.1 structure. -Kyle H On Thu, Sep 12, 2019, 02:47 Bharathi Prasad wrote: > Hi, > I have the public key of the client but not the private key. I am required > to generate a CSR with only public key. I understand p

R: CSR with only public key

2019-09-12 Thread Francesco Petruzzi
:46 A: Francesco Petruzzi Cc: openssl-users@openssl.org Oggetto: Re: CSR with only public key Dare any CA proceed to sign a CSR without verifying the signature… Maybe there are scenarios we are not aware about... On Sep 12, 2019, at 4:41 PM, Francesco Petruzzi mailto:francesco.petru

Re: CSR with only public key

2019-09-12 Thread Paul Yang via openssl-users
: Openssl Users > Oggetto: Re: CSR with only public key > > How could you create the CSR with only public key? > > > On Sep 12, 2019, at 3:50 PM, Bharathi Prasad <mailto:barati.j.pra...@gmail.com>> wrote: > > Hi, > I have the public key of the client but no

R: CSR with only public key

2019-09-12 Thread Francesco Petruzzi
: Openssl Users Oggetto: Re: CSR with only public key How could you create the CSR with only public key? On Sep 12, 2019, at 3:50 PM, Bharathi Prasad mailto:barati.j.pra...@gmail.com>> wrote: Hi, I have the public key of the client but not the private key. I am required to generate a CSR wit

Re: CSR with only public key

2019-09-12 Thread Bharathi Prasad
I used CX509CertificateRequestCertificate class to create CSR with only public key. -- Sent from: http://openssl.6102.n7.nabble.com/OpenSSL-User-f3.html

Re: CSR with only public key

2019-09-12 Thread Paul Yang via openssl-users
How could you create the CSR with only public key? > On Sep 12, 2019, at 3:50 PM, Bharathi Prasad > wrote: > > Hi, > I have the public key of the client but not the private key. I am required > to generate a CSR with only public key. I understand private key is requi

CSR with only public key

2019-09-12 Thread Bharathi Prasad
Hi, I have the public key of the client but not the private key. I am required to generate a CSR with only public key. I understand private key is required for Proof of Possession. However, as per my requirement I am supposed to create CSR only with public key and my CA would create a certificate