Two nits: > From: owner-openssl-users On Behalf Of Viktor Dukhovni > Sent: Monday, December 16, 2013 10:37
> On Mon, Dec 16, 2013 at 04:03:30PM +0100, lists wrote: > > > >I have a .pem file. Is there a way to get it converted into .crt > > >and .key files using openssl tool. > > > > ".pem" doesn't say much. > > If it is a file containing both the key and the certificate and it > > is in PEM format (as the name suggests), it is a sort of text. > > You can simply edit it and split it in two files, one containing the part > > Using a text editor is not the best approach. To extract the key > in PKCS8 form: > > $ (umask 077; openssl pkey -in mumble.pem -out mumble-key.pem) > Only 1.0.0+. > If the OpenSSL version is older than 1.0.0, to extract the key as an > RSA key. > > $ (umask 077; openssl rsa -in mumble.pem -out mumble-key.pem) > Even 1.0.0+. The commandline utilities 'rsa' 'dsa' 'ec' still output the algorithm-specific formats for privatekey (and rsa only can output publickey in PKCS#1-specific form as well). The *API* PEM_write_PrivateKey changed from specific to PKCS#8, and thus so did 'pkcs8 (not-topk8)' and 'pkcs12 (import not-nokeys)' and 'req -newkey (or equivalent)'. <snip rest> ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
