Hi Johnny, the International Grid Trust Federation requires 12 character pass phrases around private keys.
David On Wed, 2006-01-18 at 15:54 +0100, Johnny Gonzalez wrote: > Hello everybody, > > I have this issue: > > All our certificates will be used in Linux, but we > need a way to securely store our p12, I thought in > using ikey rainbow USB tokens, but those tokens work > only in Windows, does anyone knows How to store them > securely? > > Someone said that we could store them in a USB memory, > but how much time it would take to hack the p12 by > brute force? all certificates will have a validate > time of one year, would it be secure enough to have > them stored in a p12? > > Thinking about this: I wrote a "politic" for us in > which says that the password for private key and p12 > must have this characteristics: > > - minimum lenght of 10 digits > - must contain uppercase AND lowercase letters > - must contain at least 2 digits (0-9) > > What do you think about it? Having a p12 with a > password like that stored in a USB memory would be > secure enough to protect the private key? > > Thanks a lot, > Johnny > > > > ______________________________________________ > LLama Gratis a cualquier PC del Mundo. > Llamadas a fijos y móviles desde 1 céntimo por minuto. > http://es.voice.yahoo.com > > > ------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. Do you grep through log files > for problems? Stop! Download the new AJAX search engine that makes > searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642 > _______________________________________________ > Openca-Users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/openca-users ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://sel.as-us.falkag.net/sel?cmd=lnk&kid3432&bid#0486&dat1642 _______________________________________________ Openca-Users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openca-users
