Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [pem]

Privacy Enhanced Mail (PEM) is a scheme for encoding cryptographic data into ASCII as used by PGP clients. Alternate usage: `.pem` files are a container format for storing certificates, private keys, and CSRs.

0
votes
1answer
45 views

Can a DH param .pem file force the usage of only a single type of diffie-hellman exchange

Is it possible to create a diffie-hellman param .pem file to force the openssl ctx to use only a certain type of dh exchange. For example, I know that it can be used to set the length of the dh key, ...
1
vote
1answer
234 views

Loading a passphrase-protected private SSH key from a file with the cryptography Python module

I am trying to load a passphrase-protected private SSH key from a file using the cryptography Python module. However, I'm not exactly sure how to proceed. The following yields a Crypto.Util.Padding....
0
votes
1answer
97 views

re-reading decoded openssl pubkey

I was playing with openssl just to see how reading of the public key from a certificate works; Gave a "letsencrypt.pem" certificate I have, I gave these commands. See the entire certificate text: ...
2
votes
1answer
249 views

Why PEM encodings of EC public and private keys use different headers?

Manual page for OpenSSL ec command states: The PEM private key format uses the header and footer lines: -----BEGIN EC PRIVATE KEY----- -----END EC PRIVATE KEY----- The PEM public key ...
2
votes
2answers
2k views

Why to use .PEM file in ssh process

So I come from windows background and new to SSh. We are in Linux environment now and as much as I like SSh and see its benefits, what I have realized is that it can be implemented in different ways. ...
0
votes
2answers
887 views

How to convert a certbot certificate private key to “Unencrypted PEM encoded RSA”?

I use certbot to generate ssl cert for my domain. Then I use the following commands to copy the content to clipboard cat ./letsencrypt/live/mycompany.com/cert.pem |pbcopy cat ./letsencrypt/live/...
5
votes
1answer
5k views

PEM, CER, CRT, P12 - what is it all about?

I hope my question is not too general, but I find the topic of storing asymmetric keys very confusing.. Here's how I understand it: Using openSSL I can generate my RSA keys pair: openssl genrsa -out ...
2
votes
2answers
1k views

How To decrypt a private key stored in PEM format file

I manage a system that stores RSA private keys. The user can insert the keys either encrypted or clear text (it's always PEM though). the user also insert a passphrase. using the openSSL API (and not ...
1
vote
0answers
2k views

Verify pem certificate chain using openssl

I am trying to write a code which receives a pcap file as an input and returns invalid certificates from it. I have parsed certificate chains, and I'm trying to verify them. Because I get the ...
0
votes
1answer
287 views

openssl crl “Error getting CRL issuer certificate” reasons

CRL file A - http://pastebin.com/ZXGk9p0X CA file B in directory "dir1" http://pastebin.com/05PKGCjH openssl crl -in A -CApath dir1 gives the error Error getting CRL issuer certificate I had ...
2
votes
1answer
536 views

“openssl crl” verify gives “Error getting CRL issuer certificate”

File A - This is my CRL File - http://pastebin.com/yvstfPTD File B - It's signed by this cert - http://pastebin.com/T1pXZSat File C - The CRL signing cert has been issued by this CA http://pastebin....
1
vote
1answer
627 views

SSL Certificate conversion from PFX to PEM - our SP says files are wrong

We have to give our Certificate - managed by one of our suppliers to another one of our supplier. from one we got PFX file, another needs PEM files. I've ran the conversion using OpenSSL and I've ...
0
votes
1answer
138 views

Is there such a thing as an SSLeay/PKCS#1-style static Diffie-Hellman key?

That is, would you ever find a PEM file which starts: -----BEGIN DH PRIVATE KEY----- or: -----BEGIN DH PUBLIC KEY----- ? And if so, what is its structure? I know static DH keys are an oddity, ...
8
votes
2answers
22k views

Generate CSR and private key with password with OpenSSL

I am using the following command in order to generate a CSR together with a private key by using OpenSSL: openssl req -new -subj "/CN=sample.myhost.com" -out newcsr.csr -nodes -sha512 -newkey rsa:...
8
votes
1answer
1k views

Is there an official standard and/or name for PEM certificate bundles?

This is a question that's not really about security proper. It's about security/crypto nomenclature. It's been bugging me a bit, so here goes: I know two approaches for bundling related certificates/...