On 11/22/06, Marek Marcola <[EMAIL PROTECTED]> wrote:
Hello,
> openssl.exe rsa -des -in certnew.cer -out passcert.cer
>
> unable to load Private Key
> 3752:error:0906D06C:PEM routines:PEM_read_bio:no start
> line:.\crypto\pem\pem_lib.c:644:Expecting: ANY PRIVATE KEY
Are you trying to encrypt X509 certificate ?
Why ?
Certificate are public, RSA keys are private.

OK, perhaps I need to explain this more.  I have a client cert
scenario where in order to verify the client's identity a certificate
is used instead of a username / password.  I would not like for anyone
to be able to just grab the client certificate and impersonate, so I
would like to add a password to the cert.  I would think this would be
similar to where for instance Verisign sends you a certificate for
your webserver, and it has a password on it.  Am I mistaken?

Chris
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [email protected]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to