There are a couple of different ways to "export" a private+certificate file to just a certificate file, these are the commands I've found:
Export JUST the certificate PKS12 -> PEM format
$ openssl pkcs12 -in B.p12 -nokeys -out B.crt
Export JUST the certificate in PEM -> PKCS12 format
$ openssl pkcs12 -export -in B.pem -nokeys -nodes -out B.p12
The 'Export Password' must be provided by a user when the certificate is
used, it can be empty (if you are providing just the certificate, you
probably should make it empty).
(Of course, if I have one of these commands wrong, please let me
know...).
But, how can I be *absolutely* sure that my private keys are not
included in these output files? Is it sufficient to search the PEM
formats for the term 'PRIVATE KEY'?
TIA,
--
Keith Hellman #include <disclaimer.h>
[EMAIL PROTECTED] from disclaimer import standard
[EMAIL PROTECTED]
-*-
public key @ pgp.mit.edu 9FCF40FD
Y!M: mcprogramming AIM/ICQ: 485403897
gtalk: [EMAIL PROTECTED]
-*-
I used to be schizophrenic, but we're okay now.
smime.p7s
Description: S/MIME cryptographic signature
