Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.php > #5207 > unrolled thread

openssl_pkcs7_sign with key file

Back to article view | Back to comp.lang.php

Contents

  openssl_pkcs7_sign with key file Burocropoli <burocropoli@burocropoli.com.invalid> - 2012-03-24 09:38 +0100
    Re: openssl_pkcs7_sign with key file "J.O. Aho" <user@example.net> - 2012-03-24 09:48 +0100
      Re: openssl_pkcs7_sign with key file Burocropoli <burocropoli@burocropoli.com.invalid> - 2012-03-24 10:27 +0100
        Re: openssl_pkcs7_sign with key file "J.O. Aho" <user@example.net> - 2012-03-24 12:22 +0100
          Re: openssl_pkcs7_sign with key file Burocropoli <burocropoli@burocropoli.com.invalid> - 2012-03-24 12:45 +0100

#5207 — openssl_pkcs7_sign with key file

usually sign with:
openssl_pkcs7_sign("msg.txt","signed.txt", 
"signing_cert.pem",array("private_key.pem", "password"),array());

do it is possibile to use a key file instead of the "password"?

____
http://interno.comze.com

[toc] | [next] | [standalone]

#5208

Burocropoli wrote:
> usually sign with:
> openssl_pkcs7_sign("msg.txt","signed.txt",
> "signing_cert.pem",array("private_key.pem", "password"),array());
>
> do it is possibile to use a key file instead of the "password"?

You can "wash" the private key from the password

http://www.mnxsolutions.com/apache/removing-a-passphrase-from-an-ssl-key.html

Of course this would mean that who ever got hold of the key, would be able to 
use it too.

-- 

   //Aho

[toc] | [prev] | [next] | [standalone]

#5210

J.O. Aho ha scritto quanto segue il 24/03/2012 9.48>
> Burocropoli wrote:
>> usually sign with:
>> openssl_pkcs7_sign("msg.txt","signed.txt",
>> "signing_cert.pem",array("private_key.pem", "password"),array());
>>
>> do it is possibile to use a key file instead of the "password"?
>
> You can "wash" the private key from the password
>
> http://www.mnxsolutions.com/apache/removing-a-passphrase-from-an-ssl-key.html
>
>
> Of course this would mean that who ever got hold of the key, would be
> able to use it too.
>
via command line i can to use without type password:
openssl.exe smime -sign -signer "aaa.pem" -in "test.txt" -out "test.sig" 
-inkey "aaa.key"


with openssl_pkcs7_sign do it not possible?

____
http://interno.comze.com

[toc] | [prev] | [next] | [standalone]

#5215

Burocropoli wrote:
> J.O. Aho ha scritto quanto segue il 24/03/2012 9.48>
>> Burocropoli wrote:
>>> usually sign with:
>>> openssl_pkcs7_sign("msg.txt","signed.txt",
>>> "signing_cert.pem",array("private_key.pem", "password"),array());
>>>
>>> do it is possibile to use a key file instead of the "password"?
>>
>> You can "wash" the private key from the password
>>
>> http://www.mnxsolutions.com/apache/removing-a-passphrase-from-an-ssl-key.html
>>
>>
>> Of course this would mean that who ever got hold of the key, would be
>> able to use it too.
>>
> via command line i can to use without type password:
> openssl.exe smime -sign -signer "aaa.pem" -in "test.txt" -out "test.sig"
> -inkey "aaa.key"
>
>
> with openssl_pkcs7_sign do it not possible?

tried with empty or null value for password?


-- 

   //Aho

[toc] | [prev] | [next] | [standalone]

#5216

J.O. Aho ha scritto quanto segue il 24/03/2012 12.22>
> Burocropoli wrote:
>> J.O. Aho ha scritto quanto segue il 24/03/2012 9.48>
>>> Burocropoli wrote:
>>>> usually sign with:
>>>> openssl_pkcs7_sign("msg.txt","signed.txt",
>>>> "signing_cert.pem",array("private_key.pem", "password"),array());
>>>>
>>>> do it is possibile to use a key file instead of the "password"?
>>>
>>> You can "wash" the private key from the password
>>>
>>> http://www.mnxsolutions.com/apache/removing-a-passphrase-from-an-ssl-key.html
>>>
>>>
>>>
>>> Of course this would mean that who ever got hold of the key, would be
>>> able to use it too.
>>>
>> via command line i can to use without type password:
>> openssl.exe smime -sign -signer "aaa.pem" -in "test.txt" -out "test.sig"
>> -inkey "aaa.key"
>>
>>
>> with openssl_pkcs7_sign do it not possible?
>
> tried with empty or null value for password?
>
>
yes, very simple :) ty.

____
http://interno.comze.com

[toc] | [prev] | [standalone]

Back to top | Article view | comp.lang.php

csiph-web