I'm using carbonite to backup my important files to their servers.  There was
an option when I installed to manage my own encryption key which I chose to
use.  They asked for a pass phrase and I randomly generated one and saved it
into my encrypted password database like I do for all my passwords.  Then it
saves the file Carbonite-Encryption-Key.pem to my desktop.

A couple weeks later I looked at the key and decided I would use openssl to
open the encrypted private key so that I could print it out and store in a
fireproof safe.  No use making a backup of my computer if the key is stored
on my computer right?  So I ran the command: openssl rsa -in cbpk.pem -out
priv.pem

It asked me for my passphrase then I got the error: unable to load Private
Key
22673:error:06065064:digital envelope routines:EVP_DecryptFinal:bad
decrypt:evp_enc.c:450:
22673:error:0906A065:PEM routines:PEM_do_header:bad decrypt:pem_lib.c:423:

After searching the forum I found out that means I'm using the wrong
passphrase.  It's highly unlikely that I'm using the wrong passphrase
because I'm copying it from my database like I do will all my passwords but
it is possible I somehow made a copy paste error.  But before I give up and
ask carbonite to re-encrypt all my data, I want to check and see if maybe
the command I'm using is incorrect or somthing else you can think of.

The structure of the key is:
-----BEGIN RSA PRIVATE KEY-----
Proc-Type: 4,ENCRYPTED
DEK-Info: DES-EDE3-CBC,282AD1AE2F2F9350

encrypted private key here
-----END RSA PRIVATE KEY-----

Your help/suggestions are appreciated.

-- 
View this message in context: 
http://www.nabble.com/Carbonite-RSA-private-key-problem-tp21948172p21948172.html
Sent from the OpenSSL - User mailing list archive at Nabble.com.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to