Questions tagged [pkcs]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
9 views

What's the difference in PKCS- types?

If I run openssl pkcs12 -in xxx.pfx -out xxx.pfx.pem -nodes I thought it was just a PKCS12 file without security but after dealing with vSphere Integrate Containers and Apple's security utility I don'...
7
votes
1answer
11k views

How to quickly identify SSH private key file formats?

Triggered today by Remote Desktop Manager, whose SSH Key Generator offered to save a private key in OpenSSH format, but then proceeded to store it in PKCS#1 / OpenSSL format, while using the same ...
0
votes
1answer
243 views

How to create a veracrypt volume on the command line not interactively with a keyfile stored on a PKCS#11 token

I am trying to create a new veracrypt container on the command line in a completely interactive fashion. To make things more complicated, I need to store a keyfile on a PKCS#11 token. From what I ...
-1
votes
3answers
3k views

converting putty ppk to pkcs12 hangs

I'm trying to convert a putty ppk file to pkcs12 for use by a Java keystore. I've Googled half the internet, and all approaches hinge around using openssl to convert the ppk file to pkcs12. After ...
2
votes
0answers
317 views

How to import an SSH ed25519 key to GPG?

I have an SSH ed25519 key which I would like to import to GPG as an Authentication Subkey. There doesn't appear to be any documentation available on how to do this. From my understanding, I need to: ...
0
votes
0answers
422 views

Smart card issue with OpenSC (pklogin_finder debug) only on CentOS

I'm trying to use a smart card on CentOS but I'm stuck. I'm using OpenSC, and I need to implement a special module to use my smart card (libgtop11dotnet). It doesn't work on CentOS, but I tested on ...
0
votes
0answers
279 views

Smartcard Client SLL Firefox no selection

I'm trying for days now to setup client ssl with apache and firefox using my hsm smartcard. I generated one certificate for every page I'm trying to set up. The smartcard shows up in firefox and ...
1
vote
0answers
4k views

Windows 10 Logon using smartcard - Missing Driver

I am trying to log in to a domain account using smart card work but was not successful. I have the following environment setup for the test. Client Laptop (Lenovo P50) Windows 10 Fall Creator ...
1
vote
0answers
478 views

Why is openssl pkcs12 export adding extra root anchor cert, duplicating server cert on Mac OS X

[Originally posted on Slack Overflow, but comment thread complained about inappropriate venue.] We're working on switching from StartCom SSL Certificates to Let's Encrypt, and trying to get it set up ...
0
votes
1answer
2k views

Athena ID Protect v2 Token triggers Select Card dialog on PKCS#11 C_Login

I am playing around with an Athena IDProtect v2 Token from NXP (the one compatible with the IDProtect Laser product line) on Windows 10 Pro (x64 german). After installing the Athena client middle ...
0
votes
1answer
1k views

How can I extract many P7M (pkcs#7) signed files?

I have many P7M files and I need to extract them to unsigned original file, I found some free tools but with these I have to extract each one and I want something to do a massive extraction or a ...
0
votes
1answer
4k views

How to produce p12 file with RSA private key and self-signed certificate?

I believe that the exact procedure below worked for me two weeks ago, but now it doesn't. I start with an RSA private key rsa.pem and generate my own self-signed certificate: openssl req -new -x509 -...
0
votes
1answer
513 views

Storing EncFS's config file in SmartCard/Token

I used to store a random generated keyfile in a SmartCard and TrueCrypt was able to access this keyfile using PKCS #11. I'm trying EncFS now. Some people complain about it storing some of its ...
1
vote
1answer
4k views

Can't S/MIME sign using OpenSSL even if “verify” suceeds

I have a client certificate in Chrome, that I used for logging into StartSSL. I exported it using pk12util to certfile.p12. Now I want to use it for signing with S/MIME. I converted the p12 file to ...
2
votes
1answer
9k views

openssl pkcs12 keeps removing the PEM passphrase from keystore's entry?

OpenSSL 1.0.1e 11 Feb 2013 Generating a self-signed certificate: openssl req -x509 -newkey rsa:1024 -keyout key.pem -out cert.pem -days 365 During the process a PEM passphrase is requested: ...