Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.lang.php > #5208

Re: openssl_pkcs7_sign with key file

From "J.O. Aho" <user@example.net>
Newsgroups comp.lang.php
Subject Re: openssl_pkcs7_sign with key file
Date 2012-03-24 09:48 +0100
Message-ID <9t5g24F16eU1@mid.individual.net> (permalink)
References <jkk162$88j$1@dont-email.me>

Show all headers | View raw


Burocropoli wrote:
> usually sign with:
> openssl_pkcs7_sign("msg.txt","signed.txt",
> "signing_cert.pem",array("private_key.pem", "password"),array());
>
> do it is possibile to use a key file instead of the "password"?

You can "wash" the private key from the password

http://www.mnxsolutions.com/apache/removing-a-passphrase-from-an-ssl-key.html

Of course this would mean that who ever got hold of the key, would be able to 
use it too.

-- 

   //Aho

Back to comp.lang.php | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

openssl_pkcs7_sign with key file Burocropoli <burocropoli@burocropoli.com.invalid> - 2012-03-24 09:38 +0100
  Re: openssl_pkcs7_sign with key file "J.O. Aho" <user@example.net> - 2012-03-24 09:48 +0100
    Re: openssl_pkcs7_sign with key file Burocropoli <burocropoli@burocropoli.com.invalid> - 2012-03-24 10:27 +0100
      Re: openssl_pkcs7_sign with key file "J.O. Aho" <user@example.net> - 2012-03-24 12:22 +0100
        Re: openssl_pkcs7_sign with key file Burocropoli <burocropoli@burocropoli.com.invalid> - 2012-03-24 12:45 +0100

csiph-web