Questions tagged [pem]

Privacy Enhanced Mail (PEM) is a scheme for encoding cryptographic data into ASCII as used by PGP clients. Alternate usage: `.pem` files are a container format for storing certificates, private keys, and CSRs.

Filter by
Sorted by
Tagged with
0
votes
0answers
25 views

Best Practices for password/keys web-app management

Looking for ideas/feedback. We have a django web-app with postgresql. We use git for source code. We have circleci for CI. We deploy on AWS. What is the most secured/best practices in terms of ...
1
vote
1answer
68 views

Is this a PEM certificate?

I'm doing research on certificates and I've managed to find a dataset. It is a single large text file where each line appears to be a PEM encoded certificate but I am unable to load them using pythons ...
1
vote
1answer
46 views

What's the block cipher mode of my PEM certificate?

How can I find out the mode block cipher used in a PEM certificate I have? It's been generated with an intermediate CA that does sha256WithRSAEncryption but I need to find out if it's a GCM or CBC to ...
1
vote
2answers
95 views

How to encode a CMS or S/MIME PEM file with OpenSSL not encrypted or digitally signed?

We developed an application that reads a CMS encoded PEM file with this command: $ openssl cms -verify -in filepath -inform PEM -noverify The file is digitally signed, but we don't care about it, as ...
0
votes
1answer
193 views

Purpose of Decrypting & Scanning HTTPS traffic

Navigating to the below URL link from the Mozilla Firefox and entering some website link and clicking on View, displays certificate Viewer chrome://pippki/content/exceptionDialog.xul After enabling ...
0
votes
1answer
86 views

How do I verify that an ssh public/private keypair go together, is it different for openssl and ssh-key generated keys?

Generating a Private Key... $ openssl genrsa -out ./oci_api_key.pem 2048 Generate a Public Key...from the private key: I'm trying to generate a public key from a private key in PEM format (the ...
0
votes
0answers
47 views

Unable to get information from a PKCS certificate

I sniffed the communication between the client and the server using Wireshark, and I found out that during the handshake session, the client sends its certificate to the server. I've managed to get ...
0
votes
1answer
117 views

Can a DH param .pem file force the usage of only a single type of diffie-hellman exchange

Is it possible to create a diffie-hellman param .pem file to force the openssl ctx to use only a certain type of dh exchange. For example, I know that it can be used to set the length of the dh key, ...
1
vote
1answer
785 views

Loading a passphrase-protected private SSH key from a file with the cryptography Python module

I am trying to load a passphrase-protected private SSH key from a file using the cryptography Python module. However, I'm not exactly sure how to proceed. The following yields a Crypto.Util.Padding....
0
votes
1answer
149 views

re-reading decoded openssl pubkey

I was playing with openssl just to see how reading of the public key from a certificate works; Gave a "letsencrypt.pem" certificate I have, I gave these commands. See the entire certificate text: ...
2
votes
1answer
516 views

Why PEM encodings of EC public and private keys use different headers?

Manual page for OpenSSL ec command states: The PEM private key format uses the header and footer lines: -----BEGIN EC PRIVATE KEY----- -----END EC PRIVATE KEY----- The PEM public key ...
3
votes
2answers
4k views

Why to use .PEM file in ssh process

So I come from windows background and new to SSh. We are in Linux environment now and as much as I like SSh and see its benefits, what I have realized is that it can be implemented in different ways. ...
0
votes
2answers
2k views

How to convert a certbot certificate private key to “Unencrypted PEM encoded RSA”?

I use certbot to generate ssl cert for my domain. Then I use the following commands to copy the content to clipboard cat ./letsencrypt/live/mycompany.com/cert.pem |pbcopy cat ./letsencrypt/live/...
12
votes
1answer
9k views

PEM, CER, CRT, P12 - what is it all about?

I hope my question is not too general, but I find the topic of storing asymmetric keys very confusing.. Here's how I understand it: Using openSSL I can generate my RSA keys pair: openssl genrsa -out ...
2
votes
2answers
1k views

How To decrypt a private key stored in PEM format file

I manage a system that stores RSA private keys. The user can insert the keys either encrypted or clear text (it's always PEM though). the user also insert a passphrase. using the openSSL API (and not ...
1
vote
0answers
2k views

Verify pem certificate chain using openssl

I am trying to write a code which receives a pcap file as an input and returns invalid certificates from it. I have parsed certificate chains, and I'm trying to verify them. Because I get the ...
0
votes
1answer
357 views

openssl crl “Error getting CRL issuer certificate” reasons

CRL file A - http://pastebin.com/ZXGk9p0X CA file B in directory "dir1" http://pastebin.com/05PKGCjH openssl crl -in A -CApath dir1 gives the error Error getting CRL issuer certificate I had ...
2
votes
1answer
693 views

“openssl crl” verify gives “Error getting CRL issuer certificate”

File A - This is my CRL File - http://pastebin.com/yvstfPTD File B - It's signed by this cert - http://pastebin.com/T1pXZSat File C - The CRL signing cert has been issued by this CA http://pastebin....
1
vote
1answer
776 views

SSL Certificate conversion from PFX to PEM - our SP says files are wrong

We have to give our Certificate - managed by one of our suppliers to another one of our supplier. from one we got PFX file, another needs PEM files. I've ran the conversion using OpenSSL and I've ...
1
vote
1answer
159 views

Is there such a thing as an SSLeay/PKCS#1-style static Diffie-Hellman key?

That is, would you ever find a PEM file which starts: -----BEGIN DH PRIVATE KEY----- or: -----BEGIN DH PUBLIC KEY----- ? And if so, what is its structure? I know static DH keys are an oddity, ...
10
votes
2answers
28k views

Generate CSR and private key with password with OpenSSL

I am using the following command in order to generate a CSR together with a private key by using OpenSSL: openssl req -new -subj "/CN=sample.myhost.com" -out newcsr.csr -nodes -sha512 -newkey rsa:...
8
votes
1answer
2k views

Is there an official standard and/or name for PEM certificate bundles?

This is a question that's not really about security proper. It's about security/crypto nomenclature. It's been bugging me a bit, so here goes: I know two approaches for bundling related certificates/...