Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Are RSA SSL Certificates (Private and Public key) generated by makecert compatible with OpenSSL decryption ie. can I decrypt them with the openssl_* methods? I am working on two-way SSL authentication between a .NET client and a PHP service, so I want to know if I have to create OpenSSL certificates on the .NET side.

share|improve this question
    
Which kind of certificates: RSA, DSA, DH? –  curiousguy Aug 10 '12 at 3:27
    
RSA certificates –  theringostarrs Aug 10 '12 at 3:37
add comment

1 Answer

up vote 2 down vote accepted

Both makecert and OpenSSL follow X.509, so they are compatible -- in theory. X.509 is extensible is various arbitrary ways, and has been extended in various arbitrary and exotic ways, so anything can happen.

Practically, OpenSSL powers a lot of existing HTTPS web sites (according to these statistics, Apache powers more than 50% of all Web sites, and when Apache does HTTPS, it does so with OpenSSL(*)) so chances are that Microsoft tried not to break compatibility in that matter. In my experience, .NET and OpenSSL talke to each other quite politely.

(*) Well, Apache can also use GnuTLS, but it seems to be rather uncommon.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.