2 copy edit
source | link

OpenSSL accept manual signature and create X509 How can I use my HSM to turn a CSR into a certificate?

I create a CSR using opensslOpenSSL, so I have public and private keys. Now I want to sign this CSR and convert it into a X509an X.509 certificate.

OnlyThe only problem is, my signer is a custom HSM. I can send bytes and it signs itthem for me using SHA1,SHA1. (The full algorithm is called: SHA1-RSA-PKCSSHA1-RSA-PKCS.)

How can I manually extract the bytes that needsneed to be signed, get itthem signed and then feed that signature to opensslOpenSSL?

I had an idea of signing my CSR with a fake CSR, then replace signature bits. I tried some openssl stuff, but I wasn't able to do it (I learned mostly from this question: What part of the CSR is hashed in order to create its signature?) Any suggestions?

OpenSSL accept manual signature and create X509 certificate

I create a CSR using openssl, so I have public and private keys. Now I want to sign this CSR and convert it into a X509 certificate.

Only problem is, my signer is a custom HSM. I can send bytes and it signs it for me using SHA1, full algorithm is called: SHA1-RSA-PKCS

How can I manually extract bytes that needs to be signed, get it signed and feed signature to openssl?

I had an idea of signing my CSR with a fake CSR, then replace signature bits. I tried some openssl stuff, but I wasn't able to do it (I learned mostly from this question: What part of the CSR is hashed in order to create its signature?) Any suggestions?

How can I use my HSM to turn a CSR into a certificate?

I create a CSR using OpenSSL, so I have public and private keys. Now I want to sign this CSR and convert it into an X.509 certificate.

The only problem is, my signer is a custom HSM. I can send bytes and it signs them for me using SHA1. (The full algorithm is called: SHA1-RSA-PKCS.)

How can I manually extract the bytes that need to be signed, get them signed and then feed that signature to OpenSSL?

I had an idea of signing my CSR with a fake CSR, then replace signature bits. I tried some openssl stuff, but I wasn't able to do it (I learned mostly from this question: What part of the CSR is hashed in order to create its signature?) Any suggestions?

1
source | link

OpenSSL accept manual signature and create X509 certificate

I create a CSR using openssl, so I have public and private keys. Now I want to sign this CSR and convert it into a X509 certificate.

Only problem is, my signer is a custom HSM. I can send bytes and it signs it for me using SHA1, full algorithm is called: SHA1-RSA-PKCS

How can I manually extract bytes that needs to be signed, get it signed and feed signature to openssl?

I had an idea of signing my CSR with a fake CSR, then replace signature bits. I tried some openssl stuff, but I wasn't able to do it (I learned mostly from this question: What part of the CSR is hashed in order to create its signature?) Any suggestions?