Re: EC private key generation problem

2013-11-08 Thread Viktor Dukhovni
On Fri, Nov 08, 2013 at 01:37:21PM +0200, Serhat Sevki Dincer wrote: > what's the correct commandline? You can alternatively generate ec keys with ecparam(1): $ umask 077 $ openssl ecparam -genkey -name prime256v1 | openssl pkey -aes128 -out priv.pem -- Viktor.

Re: EC private key generation problem

2013-11-08 Thread Viktor Dukhovni
On Fri, Nov 08, 2013 at 01:37:21PM +0200, Serhat Sevki Dincer wrote: > On windows 7 with OpenSSL 1.0.1e, I get the following output: > > $ openssl.exe genpkey -out priv.pem -aes128 -algorithm EC -pkeyopt > ec_paramgen_curve:secp224r1 > > parameter setting error 3512:error:06089094:digital envel

Re: EC private key generation problem

2013-11-08 Thread Dr. Stephen Henson
On Fri, Nov 08, 2013, Serhat Sevki Dincer wrote: > Hi, > On windows 7 with OpenSSL 1.0.1e, I get the following output: > > $ openssl.exe genpkey -out priv.pem -aes128 -algorithm EC -pkeyopt > ec_paramgen_curve:secp224r1 > > parameter setting error 3512:error:06089094:digital envelope > routines:

EC private key generation problem

2013-11-08 Thread Serhat Sevki Dincer
Hi, On windows 7 with OpenSSL 1.0.1e, I get the following output: $ openssl.exe genpkey -out priv.pem -aes128 -algorithm EC -pkeyopt ec_paramgen_curve:secp224r1 parameter setting error 3512:error:06089094:digital envelope routines:EVP_PKEY_CTX_ctrl:invalid operation:.\crypto\evp\pmeth_lib.c:404

Re: Pass phrase based public/private key generation

2012-02-15 Thread anthony berglas
y-generate-an-asymmetric-key-pair-from-a-short-passphrase > > > ** ** > > Ryan > > *From:* owner-openssl-us...@openssl.org [mailto: > owner-openssl-us...@openssl.org] *On Behalf Of *anthony berglas > *Sent:* Tuesday, February 14, 2012 7:38 PM > *To:* ope

RE: Pass phrase based public/private key generation

2012-02-15 Thread Ryan Hurst
openssl-us...@openssl.org] On Behalf Of anthony berglas Sent: Tuesday, February 14, 2012 7:38 PM To: openssl-users@openssl.org Subject: Re: Pass phrase based public/private key generation Hello Jeff, Thanks for that. But IDE still needs a server and binary secrets to be held. I just want a s

Re: Pass phrase based public/private key generation

2012-02-14 Thread anthony berglas
Hello Jeff, Thanks for that. But IDE still needs a server and binary secrets to be held. I just want a simple pass phrase based scheme. It is odd that this is not more commonplace. Anthony On Wed, Feb 15, 2012 at 12:36 PM, Jeffrey Walton wrote: > On Tue, Feb 14, 2012 at 7:53 PM, anthony be

Re: Pass phrase based public/private key generation

2012-02-14 Thread Jeffrey Walton
On Tue, Feb 14, 2012 at 7:53 PM, anthony berglas wrote: > Hello All, > > I want to set up a simple system in which the private key is derived > entirely from a pass phrase. > > I.e. the pass phrase provides all the "Entropy" that is used.  This means > that the private key can be regenerated from

Pass phrase based public/private key generation

2012-02-14 Thread anthony berglas
Hello All, I want to set up a simple system in which the private key is derived entirely from a pass phrase. I.e. the pass phrase provides all the "Entropy" that is used. This means that the private key can be regenerated from the pass phrase at any time, without needing to maintain a secure key

Re: Private key generation

2011-05-14 Thread Zico
On Sun, May 15, 2011 at 1:55 AM, Larry Bugbee wrote: > > > It is a matter of trust. If your server is serving a very small group that > will trust your self-signed cert, then fine. If however your server is to > be visited by a large number of people most of which won't know you, they > would l

Re: Private key generation

2011-05-14 Thread Larry Bugbee
On May 14, 2011, at 11:54 AM, Zico wrote: > Do we "actually" need a third party to make our certificate? I mean, we can > generate self-certified certificates, right? So, will my production machine > not run if I don't use CAcert.org or GoDaddy or Verisign? It is a matter of trust. If your se

Re: Private key generation

2011-05-14 Thread Zico
On Sat, May 14, 2011 at 8:06 AM, Dave Thompson wrote: > > The latter, as long as you transfer the private key from your machine > to the server along with the certificate from the CA. > > You do need to keep *both* machines (keygen and server) secure > and also the transfer process. It's usually a

RE: Private key generation

2011-05-13 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Zico > Sent: Friday, 13 May, 2011 06:10 > Hi, is it necessary to generate private from "that server" > in which I will install SSL certificate? I mean, say, I want to > install SSL certificate for my www.mysite.com, now, is i

RE: Private key generation

2011-05-13 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Zico > Sent: Friday, 13 May, 2011 06:10 > Hi, is it necessary to generate private from "that server" > in which I will install SSL certificate? I mean, say, I want to > install SSL certificate for my www.mysite.com, now, is i

Private key generation

2011-05-13 Thread Zico
Hi, is it necessary to generate private from "that server" in which I will install SSL certificate? I mean, say, I want to install SSL certificate for my www.mysite.com, now, is it necessary that, I have to generate private key and csr from that "www.mysite.com" server? Or, I can also create privat

RSA PRIVATE KEY GENERATION (Errors)

2001-12-17 Thread Saju Paul
Trying to generate a RSA private key and get the errors shown below   It is able to generate private keys when numbits <= 64.   Any Ideas AnyOne; Thanks In Advance   $WORK0 OLAPPOBJ 315> run openssl genrsa -out $work0.cadir.privkey -rand $work0.cadir.rnd -des3 -out $work0.cadir.privk

Re: About private key generation in MSIE

2000-06-15 Thread Rick Fister
Here's a URL that has some relevant info: http://www.microsoft.com/security/tech/certificates/enroll.asp Rick Rodrigo Coronado Vigueras wrote: > Hi. Does anyone know info. or URLs about the way MSIE generate private > keys, ActiveX controls and stuff? Thanks > >

Re: About private key generation in MSIE

2000-06-15 Thread Michael Sierchio
Rodrigo Coronado Vigueras wrote: > > Hi. Does anyone know info. or URLs about the way MSIE generate private > keys, ActiveX controls and stuff? Thanks Usually by some VBScript which invokes functions in the ubiquitous 'xenroll.cab'

About private key generation in MSIE

2000-06-15 Thread Rodrigo Coronado Vigueras
Hi. Does anyone know info. or URLs about the way MSIE generate private keys, ActiveX controls and stuff? Thanks __ OpenSSL Project http://www.openssl.org User Support Mailing List