hello,
i just subscribed to this list and am not sure whether i probably hit the wrong list.
If so i apologise ...

but now the question

I need to create a certificate request with encrypted, password protected pkcs8-key and a cert request in PEM format. (that is usually generated from the BEA WL6 console for which the Cert later is meant - but I'd rather use openssl for it)

What I tried is this:

$OSSL req -newkey rsa:1024 -passout pass:$PW -passin pass:$PW -keyout ~/cert-requests/$CN-key.pw -keyform DER -out ~/cert-requests/$CN-req.csr -outform PEM -config ~/cert-requests/ossl.conf.tmp

(
and also
encrypt_key = yes
in ossl.conf.tmp
)

However it refuses to give me an DER key but still generates a pem-format key
(
file www.test.com-key.pw
www.test.com-key.pw:    ascii text
)

I can convert the key to DER-format
openssl rsa -in www.test.com-key.pw -outform DER -passout pass:$PW -out www.test.de-key.der

but then the Password seems to be gone

Any suggestions?
Thanks in advance

openssl:
OpenSSL 0.9.7e 25 Oct 2004

System:
SunOS (...) 5.8 Generic_117350-26 sun4u sparc SUNW,Sun-Fire-V240

kind regards
Markus



______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to