Questions tagged [pkcs]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
64 views

gpgsm: Cannot import private key

For signing emails, I requested an S/MIME certificate using the German academic DFN service. AT the end of this process, I get a .p12 file (PKCS12). I can convert this file to PEM using openssl ...
1 vote
1 answer
273 views

Use PKCS#11 for SSH connection to the server to make token dependency

I have configured PKCS#11 remote ssh connection on my Ubuntu server such that users can login to it using a hardware token, as described here. However, in this condition, the user can login to the ...
  • 175
0 votes
0 answers
50 views

Mariadb use HSM instead of private key files for server side ssl/tls

There seems to be 0 support for instructing the mariadb server to use a pkcs11 interface instead of using a private key file. I'd like to have mariadb talk to an HSM to establish incoming secure ...
12 votes
1 answer
25k views

How to quickly identify SSH private key file formats?

Triggered today by Remote Desktop Manager, whose SSH Key Generator offered to save a private key in OpenSSH format, but then proceeded to store it in PKCS#1 / OpenSSL format, while using the same ...
0 votes
1 answer
302 views

How to create a veracrypt volume on the command line not interactively with a keyfile stored on a PKCS#11 token

I am trying to create a new veracrypt container on the command line in a completely interactive fashion. To make things more complicated, I need to store a keyfile on a PKCS#11 token. From what I ...
  • 737
-1 votes
3 answers
5k views

converting putty ppk to pkcs12 hangs

I'm trying to convert a putty ppk file to pkcs12 for use by a Java keystore. I've Googled half the internet, and all approaches hinge around using openssl to convert the ppk file to pkcs12. After ...
  • 113
4 votes
1 answer
700 views

How to import an SSH ed25519 key to GPG?

I have an SSH ed25519 key which I would like to import to GPG as an Authentication Subkey. There doesn't appear to be any documentation available on how to do this.
  • 45
0 votes
0 answers
551 views

Smart card issue with OpenSC (pklogin_finder debug) only on CentOS

I'm trying to use a smart card on CentOS but I'm stuck. I'm using OpenSC, and I need to implement a special module to use my smart card (libgtop11dotnet). It doesn't work on CentOS, but I tested on ...
  • 11
0 votes
0 answers
297 views

Smartcard Client SLL Firefox no selection

I'm trying for days now to setup client ssl with apache and firefox using my hsm smartcard. I generated one certificate for every page I'm trying to set up. The smartcard shows up in firefox and ...
  • 13
1 vote
0 answers
5k views

Windows 10 Logon using smartcard - Missing Driver

I am trying to log in to a domain account using smart card work but was not successful. I have the following environment setup for the test. Client Laptop (Lenovo P50) Windows 10 Fall Creator ...
  • 11
1 vote
0 answers
625 views

Why is openssl pkcs12 export adding extra root anchor cert, duplicating server cert on Mac OS X

[Originally posted on Slack Overflow, but comment thread complained about inappropriate venue.] We're working on switching from StartCom SSL Certificates to Let's Encrypt, and trying to get it set up ...
0 votes
1 answer
3k views

Athena ID Protect v2 Token triggers Select Card dialog on PKCS#11 C_Login

I am playing around with an Athena IDProtect v2 Token from NXP (the one compatible with the IDProtect Laser product line) on Windows 10 Pro (x64 german). After installing the Athena client middle ...
  • 1,088
1 vote
1 answer
2k views

How can I extract many P7M (pkcs#7) signed files?

I have many P7M files and I need to extract them to unsigned original file, I found some free tools but with these I have to extract each one and I want something to do a massive extraction or a ...
  • 2,174
1 vote
1 answer
5k views

How to produce p12 file with RSA private key and self-signed certificate?

I believe that the exact procedure below worked for me two weeks ago, but now it doesn't. I start with an RSA private key rsa.pem and generate my own self-signed certificate: openssl req -new -x509 -...
  • 189
0 votes
1 answer
544 views

Storing EncFS's config file in SmartCard/Token

I used to store a random generated keyfile in a SmartCard and TrueCrypt was able to access this keyfile using PKCS #11. I'm trying EncFS now. Some people complain about it storing some of its ...
  • 285
1 vote
1 answer
5k views

Can't S/MIME sign using OpenSSL even if "verify" suceeds

I have a client certificate in Chrome, that I used for logging into StartSSL. I exported it using pk12util to certfile.p12. Now I want to use it for signing with S/MIME. I converted the p12 file to ...
2 votes
1 answer
9k views

openssl pkcs12 keeps removing the PEM passphrase from keystore's entry?

OpenSSL 1.0.1e 11 Feb 2013 Generating a self-signed certificate: openssl req -x509 -newkey rsa:1024 -keyout key.pem -out cert.pem -days 365 During the process a PEM passphrase is requested: ...
  • 1,459