Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.lang.php > #5210

Re: openssl_pkcs7_sign with key file

From Burocropoli <burocropoli@burocropoli.com.invalid>
Newsgroups comp.lang.php
Subject Re: openssl_pkcs7_sign with key file
Date 2012-03-24 10:27 +0100
Organization A noiseless patient Spider
Message-ID <jkk42k$kn3$1@dont-email.me> (permalink)
References <jkk162$88j$1@dont-email.me> <9t5g24F16eU1@mid.individual.net>

Show all headers | View raw


J.O. Aho ha scritto quanto segue il 24/03/2012 9.48>
> Burocropoli wrote:
>> usually sign with:
>> openssl_pkcs7_sign("msg.txt","signed.txt",
>> "signing_cert.pem",array("private_key.pem", "password"),array());
>>
>> do it is possibile to use a key file instead of the "password"?
>
> You can "wash" the private key from the password
>
> http://www.mnxsolutions.com/apache/removing-a-passphrase-from-an-ssl-key.html
>
>
> Of course this would mean that who ever got hold of the key, would be
> able to use it too.
>
via command line i can to use without type password:
openssl.exe smime -sign -signer "aaa.pem" -in "test.txt" -out "test.sig" 
-inkey "aaa.key"


with openssl_pkcs7_sign do it not possible?

____
http://interno.comze.com

Back to comp.lang.php | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

openssl_pkcs7_sign with key file Burocropoli <burocropoli@burocropoli.com.invalid> - 2012-03-24 09:38 +0100
  Re: openssl_pkcs7_sign with key file "J.O. Aho" <user@example.net> - 2012-03-24 09:48 +0100
    Re: openssl_pkcs7_sign with key file Burocropoli <burocropoli@burocropoli.com.invalid> - 2012-03-24 10:27 +0100
      Re: openssl_pkcs7_sign with key file "J.O. Aho" <user@example.net> - 2012-03-24 12:22 +0100
        Re: openssl_pkcs7_sign with key file Burocropoli <burocropoli@burocropoli.com.invalid> - 2012-03-24 12:45 +0100

csiph-web