Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

openssl genpkey command not found

321 views
Skip to first unread message

Yang Chun-Kai

unread,
Dec 17, 2011, 2:18:27 PM12/17/11
to
Hello~everyone~

As titled, genpkey command not found in 0.9.8, so is this new in latest version?

Or should I so something for using it?

Jeffrey Walton

unread,
Dec 17, 2011, 5:25:59 PM12/17/11
to
2011/12/17 Yang Chun-Kai <waitme...@hotmail.com>:
> Hello~everyone~
>
> As titled, genpkey command not found in 0.9.8, so is this new in latest
> version?
RSA (112 bits of security):
$ openssl genrsa -out rsa-openssl.pem 2048
$ openssl pkcs8 -nocrypt -in rsa-openssl.pem -inform PEM -topk8
-outform DER -out rsa-openssl.der

DSA (80 bits of security):
$ openssl dsaparam -out dsa-param-openssl.pem 1024
$ openssl gendsa -out dsa-openssl.pem dsa-param-openssl.pem
$ openssl pkcs8 -nocrypt -in dsa-openssl.pem -inform PEM -topk8
-outform DER -out dsa-openssl.der

ECC (128 bits of security):
$ openssl ecparam -name secp256k1 -genkey -param_enc explicit -outform
DER -out ec-openssl.der

All keys are PKCS8.

Jeff
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openss...@openssl.org
Automated List Manager majo...@openssl.org

Jeffrey Walton

unread,
Dec 17, 2011, 7:08:16 PM12/17/11
to
On Dec 17, 5:25 pm, noloa...@gmail.com (Jeffrey Walton) wrote:
> 2011/12/17 Yang Chun-Kai <waitmefore...@hotmail.com>:> Hello~everyone~
>
> > As titled, genpkey command not found in 0.9.8, so is this new in latest
> > version?
>
> RSA (112 bits of security):
> $ openssl genrsa -out rsa-openssl.pem 2048
> $ openssl pkcs8 -nocrypt -in rsa-openssl.pem -inform PEM -topk8
> -outform DER -out rsa-openssl.der
$ openssl rsa -in rsa-openssl.pem -pubout -outform DER -out rsa-
openssl.der

> DSA (80 bits of security):
> $ openssl dsaparam -out dsa-param-openssl.pem 1024
> $ openssl gendsa -out dsa-openssl.pem dsa-param-openssl.pem
> $ openssl pkcs8 -nocrypt -in dsa-openssl.pem -inform PEM -topk8
> -outform DER -out dsa-openssl.der
$ openssl dsa -in dsa-openssl.pem -pubout -outform DER -out dsa-
openssl.der

> ECC (128 bits of security):
> $ openssl ecparam -name secp256k1 -genkey -param_enc explicit -outform
> DER -out ec-openssl.der
$ openssl ec -param_enc explicit -inform PEM -in ec-openssl.pem -
pubout -outform DER -out ec-openssl.der

My bad. I overlooked you wanted the public keys.

Jeff

Dave Thompson

unread,
Dec 19, 2011, 6:13:21 PM12/19/11
to
Sorry about the HTML but Outlook refuses to convert this for some reason.


From: owner-ope...@openssl.org [mailto:owner-ope...@openssl.org] On Behalf Of Yang Chun-Kai
Sent: Saturday, 17 December, 2011 14:18
To: openss...@openssl.org
Subject: openssl genpkey command not found

Hello~everyone~

As titled, genpkey command not found in 0.9.8, so is this new in latest version?
 
genpkey pkeyparam pkeyutl pkey are all new in 1.0.0, which is about to become
NOT the latest version.
 
0.9.8 had only the algorithm-specific utilities:
genrsa rsa rsautl; dsaparam gendsa dsa; dhparam gendh dh; ecparam ec
 
 
0 new messages