Path: csiph.com!usenet.pasdenom.info!weretis.net!feeder4.news.weretis.net!news.musoftware.de!wum.musoftware.de!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: "J.O. Aho" <user@example.net>
Newsgroups: comp.lang.php
Subject: Re: openssl_pkcs7_sign with key file
Date: Sat, 24 Mar 2012 09:48:03 +0100
Lines: 17
Message-ID: <9t5g24F16eU1@mid.individual.net>
References: <jkk162$88j$1@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Trace: individual.net bqDZLL4NravPwkj5289/RwzpXpEHju5rOxZUpLhw6R503ljYl1
Cancel-Lock: sha1:L3ZLfjiVGkhH1G+oKbTZ6qaZTkw=
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:11.0) Gecko/20120321 Firefox/11.0 SeaMonkey/2.8
In-Reply-To: <jkk162$88j$1@dont-email.me>
Xref: csiph.com comp.lang.php:5208

Burocropoli wrote:
> usually sign with:
> openssl_pkcs7_sign("msg.txt","signed.txt",
> "signing_cert.pem",array("private_key.pem", "password"),array());
>
> do it is possibile to use a key file instead of the "password"?

You can "wash" the private key from the password

http://www.mnxsolutions.com/apache/removing-a-passphrase-from-an-ssl-key.html

Of course this would mean that who ever got hold of the key, would be able to 
use it too.

-- 

   //Aho