Re: openssl_pkcs7_sign with key file

Path	csiph.com!usenet.pasdenom.info!weretis.net!feeder4.news.weretis.net!news.musoftware.de!wum.musoftware.de!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From	"J.O. Aho" <user@example.net>
Newsgroups	comp.lang.php
Subject	Re: openssl_pkcs7_sign with key file
Date	Sat, 24 Mar 2012 09:48:03 +0100
Lines	17
Message-ID	<9t5g24F16eU1@mid.individual.net> (permalink)
References	<jkk162$88j$1@dont-email.me>
Mime-Version	1.0
Content-Type	text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding	7bit
X-Trace	individual.net bqDZLL4NravPwkj5289/RwzpXpEHju5rOxZUpLhw6R503ljYl1
Cancel-Lock	sha1:L3ZLfjiVGkhH1G+oKbTZ6qaZTkw=
User-Agent	Mozilla/5.0 (X11; Linux x86_64; rv:11.0) Gecko/20120321 Firefox/11.0 SeaMonkey/2.8
In-Reply-To	<jkk162$88j$1@dont-email.me>
Xref	csiph.com comp.lang.php:5208

Show key headers only | View raw

Burocropoli wrote:
> usually sign with:
> openssl_pkcs7_sign("msg.txt","signed.txt",
> "signing_cert.pem",array("private_key.pem", "password"),array());
>
> do it is possibile to use a key file instead of the "password"?

You can "wash" the private key from the password

http://www.mnxsolutions.com/apache/removing-a-passphrase-from-an-ssl-key.html

Of course this would mean that who ever got hold of the key, would be able to 
use it too.

-- 

   //Aho

Thread

openssl_pkcs7_sign with key file Burocropoli <burocropoli@burocropoli.com.invalid> - 2012-03-24 09:38 +0100
  Re: openssl_pkcs7_sign with key file "J.O. Aho" <user@example.net> - 2012-03-24 09:48 +0100
    Re: openssl_pkcs7_sign with key file Burocropoli <burocropoli@burocropoli.com.invalid> - 2012-03-24 10:27 +0100
      Re: openssl_pkcs7_sign with key file "J.O. Aho" <user@example.net> - 2012-03-24 12:22 +0100
        Re: openssl_pkcs7_sign with key file Burocropoli <burocropoli@burocropoli.com.invalid> - 2012-03-24 12:45 +0100

csiph-web