openssl rsa -in inca.key.pem -des3 -out outca.key.pem
would be preferable since the -des3 would trigger output encryption, and you would be ASKED for the new pass phrase, while using stdin it just gapes at you with no prompt. I was (unsuccessfully) trying to remember the trigger for output encryption and I thought -passout rather than -des3.
David Gianndrea wrote:
Ok so to recap I would do the following.
openssl rsa -in origca.key.pem -passout stdin -out newca.key.pem openssl rsa -in newca.key.pem -des3 -out ca.key.pem
-- Charles B (Ben) Cranston mailto: [EMAIL PROTECTED] http://www.wam.umd.edu/~zben
______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
