Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Are RSA SSL Certificates (Private and Public key) generated by makecert compatible with OpenSSL decryption ie. can I decrypt them with the openssl_* methods? I am working on two-way SSL authentication between a .NET client and a PHP service, so I want to know if I have to create OpenSSL certificates on the .NET side.

share|improve this question
Which kind of certificates: RSA, DSA, DH? – curiousguy Aug 10 '12 at 3:27
RSA certificates – theringostarrs Aug 10 '12 at 3:37
up vote 2 down vote accepted

Both makecert and OpenSSL follow X.509, so they are compatible -- in theory. X.509 is extensible is various arbitrary ways, and has been extended in various arbitrary and exotic ways, so anything can happen.

Practically, OpenSSL powers a lot of existing HTTPS web sites (according to these statistics, Apache powers more than 50% of all Web sites, and when Apache does HTTPS, it does so with OpenSSL(*)) so chances are that Microsoft tried not to break compatibility in that matter. In my experience, .NET and OpenSSL talke to each other quite politely.

(*) Well, Apache can also use GnuTLS, but it seems to be rather uncommon.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.