A#) openssl req -x509 -nodes -newkey rsa:4096 -keyout private.key -out 
public.key

B#) openssl smime -encrypt -binary -aes-256-cbc -in message.txt -out 
encrypted.dat -outform DER public.key

C#) openssl smime -decrypt -in encrypted.dat -binary -inform DEM -inkey 
private.key -out decrypted.txt

How can I complete step A#), so that step B#)  will work, without involving a 
Certificate Request, which requires
a non-blank two digit nation code,

'You can set an empty issuer/subject DN, or use "-keyid" to avoid copying
these into the CMS message.'

Can someone please update my included A#), B#) or C#) instructions, included 
above here, to acheive
this suggestion, so that no certificate information is put into 
'encrypted.dat', including the nation,
so that 'encrypted.dat' includes no plain text whatsoever, and so that A#) + 
B#) + C#) all work
as desired, for small, medium and large files, of 'message.txt'?  I am 
struggling to correct what I
have done so far, so that there are no errors, and so that all the steps work: 
(generation of a private and public key,
encryption of the file, and decrypt of the file).  ?

Reply via email to