Questions tagged [pem]

Privacy Enhanced Mail (PEM) is a scheme for encoding cryptographic data into ASCII as used by PGP clients. Alternate usage: `.pem` files are a container format for storing certificates, private keys, and CSRs.

Filter by
Sorted by
Tagged with
1
vote
1answer
43 views

What is LS0… encoding of a PKI certificate?

I am looking through a set of PKI certificates and key strings that are specified in a kubernetes yaml file. They are used for testing. Some of the strings are keyed (as in yaml key-value) as crt.pem. ...
0
votes
1answer
67 views

Is it possible to decode an encoded PEM SSL certificate without OpenSSL in CLI? [closed]

It is said that PEM certificates are encoded with ASCII (Base64), excluding labels. Let's take this certificate as an example. -----BEGIN CERTIFICATE----- ...
0
votes
1answer
174 views

Missing DEK-Info header when converting from P12 to PEM using OpenSSL 2.8.3

I'm using openssl to convert an exported *.p12 file into a *.pem file that has a certificate and an encrypted private key. The P12 file was exported with a password, this is the command that I'm ...
0
votes
1answer
73 views

How to add subject alternative name when converting PEM certificate to DER format?

Is it possible to add a subject alternative name when converting PEM certificate to DER format. openssl x509 -outform der -in Certificate.pem -out Certificate.der -extensions SAN -subject-alternative-...
1
vote
1answer
79 views

Is this a PEM certificate?

I'm doing research on certificates and I've managed to find a dataset. It is a single large text file where each line appears to be a PEM encoded certificate but I am unable to load them using pythons ...
1
vote
1answer
57 views

What's the block cipher mode of my PEM certificate?

How can I find out the mode block cipher used in a PEM certificate I have? It's been generated with an intermediate CA that does sha256WithRSAEncryption but I need to find out if it's a GCM or CBC to ...
1
vote
2answers
268 views

How to encode a CMS or S/MIME PEM file with OpenSSL not encrypted or digitally signed?

We developed an application that reads a CMS encoded PEM file with this command: $ openssl cms -verify -in filepath -inform PEM -noverify The file is digitally signed, but we don't care about it, as ...
0
votes
1answer
252 views

Purpose of Decrypting & Scanning HTTPS traffic

Navigating to the below URL link from the Mozilla Firefox and entering some website link and clicking on View, displays certificate Viewer chrome://pippki/content/exceptionDialog.xul After enabling ...
0
votes
1answer
575 views

How do I verify that an ssh public/private keypair go together, is it different for openssl and ssh-key generated keys?

Generating a Private Key... $ openssl genrsa -out ./oci_api_key.pem 2048 Generate a Public Key...from the private key: I'm trying to generate a public key from a private key in PEM format (the ...
0
votes
0answers
51 views

Unable to get information from a PKCS certificate

I sniffed the communication between the client and the server using Wireshark, and I found out that during the handshake session, the client sends its certificate to the server. I've managed to get ...
0
votes
1answer
142 views

Can a DH param .pem file force the usage of only a single type of diffie-hellman exchange

Is it possible to create a diffie-hellman param .pem file to force the openssl ctx to use only a certain type of dh exchange. For example, I know that it can be used to set the length of the dh key, ...
1
vote
1answer
1k views

Loading a passphrase-protected private SSH key from a file with the cryptography Python module

I am trying to load a passphrase-protected private SSH key from a file using the cryptography Python module. However, I'm not exactly sure how to proceed. The following yields a Crypto.Util.Padding....
0
votes
1answer
190 views

re-reading decoded openssl pubkey

I was playing with openssl just to see how reading of the public key from a certificate works; Gave a "letsencrypt.pem" certificate I have, I gave these commands. See the entire certificate text: ...
2
votes
1answer
781 views

Why PEM encodings of EC public and private keys use different headers?

Manual page for OpenSSL ec command states: The PEM private key format uses the header and footer lines: -----BEGIN EC PRIVATE KEY----- -----END EC PRIVATE KEY----- The PEM public key ...
3
votes
2answers
6k views

Why to use .PEM file in ssh process

So I come from windows background and new to SSh. We are in Linux environment now and as much as I like SSh and see its benefits, what I have realized is that it can be implemented in different ways. ...
0
votes
2answers
2k views

How to convert a certbot certificate private key to “Unencrypted PEM encoded RSA”?

I use certbot to generate ssl cert for my domain. Then I use the following commands to copy the content to clipboard cat ./letsencrypt/live/mycompany.com/cert.pem |pbcopy cat ./letsencrypt/live/...
16
votes
1answer
13k views

PEM, CER, CRT, P12 - what is it all about?

I hope my question is not too general, but I find the topic of storing asymmetric keys very confusing.. Here's how I understand it: Using openSSL I can generate my RSA keys pair: openssl genrsa -out ...
2
votes
2answers
2k views

How To decrypt a private key stored in PEM format file

I manage a system that stores RSA private keys. The user can insert the keys either encrypted or clear text (it's always PEM though). the user also insert a passphrase. using the openSSL API (and not ...
1
vote
0answers
2k views

Verify pem certificate chain using openssl

I am trying to write a code which receives a pcap file as an input and returns invalid certificates from it. I have parsed certificate chains, and I'm trying to verify them. Because I get the ...
0
votes
1answer
384 views

openssl crl “Error getting CRL issuer certificate” reasons

CRL file A - http://pastebin.com/ZXGk9p0X CA file B in directory "dir1" http://pastebin.com/05PKGCjH openssl crl -in A -CApath dir1 gives the error Error getting CRL issuer certificate I had ...
2
votes
1answer
798 views

“openssl crl” verify gives “Error getting CRL issuer certificate”

File A - This is my CRL File - http://pastebin.com/yvstfPTD File B - It's signed by this cert - http://pastebin.com/T1pXZSat File C - The CRL signing cert has been issued by this CA http://pastebin....
1
vote
1answer
894 views

SSL Certificate conversion from PFX to PEM - our SP says files are wrong

We have to give our Certificate - managed by one of our suppliers to another one of our supplier. from one we got PFX file, another needs PEM files. I've ran the conversion using OpenSSL and I've ...
1
vote
1answer
177 views

Is there such a thing as an SSLeay/PKCS#1-style static Diffie-Hellman key?

That is, would you ever find a PEM file which starts: -----BEGIN DH PRIVATE KEY----- or: -----BEGIN DH PUBLIC KEY----- ? And if so, what is its structure? I know static DH keys are an oddity, ...
12
votes
2answers
34k views

Generate CSR and private key with password with OpenSSL

I am using the following command in order to generate a CSR together with a private key by using OpenSSL: openssl req -new -subj "/CN=sample.myhost.com" -out newcsr.csr -nodes -sha512 -newkey rsa:...
9
votes
1answer
2k views

Is there an official standard and/or name for PEM certificate bundles?

This is a question that's not really about security proper. It's about security/crypto nomenclature. It's been bugging me a bit, so here goes: I know two approaches for bundling related certificates/...